syscall.sh / x86 / fanotify_mark
fanotify_mark
add, remove, or modify an fanotify mark on a filesystem object
sys_fanotify_mark(int fanotify_fd, unsigned int flags, u64 mask, int fd, const char *pathname)| number | 339 (0x153) |
|---|---|
| abi | i386 |
| entry point | sys_fanotify_mark |
| since | Linux 3.3 |
| man page | fanotify_mark(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
eax | 339, the syscall number |
ebx | int fanotify_fd |
ecx | unsigned int flags |
edx | u64 mask |
esi | int fd |
edi | const char *pathname |
eax | the return value |
Then run int 0x80 to enter the kernel.
Same syscall on other architectures
- x64 301
- arm64 263
- arm 368
- riscv64 263
- x32 1073742125
- loongarch64 263
- ppc64 324
- ppc 324
- s390x 333
- mips64 5296
- mipsn32 6301
- mipso32 4337
- alpha 495
- arc 263
- csky 263
- hexagon 263
- m68k 338
- microblaze 369
- nios2 263
- openrisc 263
- parisc 323
- sh 338
- sparc 330
- sparc64 330
- xtensa 321
Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/fanotify_mark