106 lines
3.2 KiB
C
106 lines
3.2 KiB
C
|
#ifndef _FANOTIFY_H
|
||
|
|
#define _FANOTIFY_H
|
||
|
|
|
||
|
|
#ifdef __cplusplus
|
||
|
|
extern "C" {
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#include <sys/statfs.h>
|
||
|
|
|
||
|
|
struct fanotify_event_metadata {
|
||
|
|
unsigned event_len;
|
||
|
|
unsigned char vers;
|
||
|
|
unsigned char reserved;
|
||
|
|
unsigned short metadata_len;
|
||
|
|
unsigned long long mask
|
||
|
|
#ifdef __GNUC__
|
||
|
|
__attribute__((__aligned__(8)))
|
||
|
|
#endif
|
||
|
|
;
|
||
|
|
int fd;
|
||
|
|
int pid;
|
||
|
|
};
|
||
|
|
|
||
|
|
struct fanotify_event_info_header {
|
||
|
|
unsigned char info_type;
|
||
|
|
unsigned char pad;
|
||
|
|
unsigned short len;
|
||
|
|
};
|
||
|
|
|
||
|
|
struct fanotify_event_info_fid {
|
||
|
|
struct fanotify_event_info_header hdr;
|
||
|
|
fsid_t fsid;
|
||
|
|
unsigned char handle[];
|
||
|
|
};
|
||
|
|
|
||
|
|
struct fanotify_response {
|
||
|
|
int fd;
|
||
|
|
unsigned response;
|
||
|
|
};
|
||
|
|
|
||
|
|
#define FAN_ACCESS 0x01
|
||
|
|
#define FAN_MODIFY 0x02
|
||
|
|
#define FAN_ATTRIB 0x04
|
||
|
|
#define FAN_CLOSE_WRITE 0x08
|
||
|
|
#define FAN_CLOSE_NOWRITE 0x10
|
||
|
|
#define FAN_OPEN 0x20
|
||
|
|
#define FAN_MOVED_FROM 0x40
|
||
|
|
#define FAN_MOVED_TO 0x80
|
||
|
|
#define FAN_CREATE 0x100
|
||
|
|
#define FAN_DELETE 0x200
|
||
|
|
#define FAN_DELETE_SELF 0x400
|
||
|
|
#define FAN_MOVE_SELF 0x800
|
||
|
|
#define FAN_OPEN_EXEC 0x1000
|
||
|
|
#define FAN_Q_OVERFLOW 0x4000
|
||
|
|
#define FAN_OPEN_PERM 0x10000
|
||
|
|
#define FAN_ACCESS_PERM 0x20000
|
||
|
|
#define FAN_OPEN_EXEC_PERM 0x40000
|
||
|
|
#define FAN_ONDIR 0x40000000
|
||
|
|
#define FAN_EVENT_ON_CHILD 0x08000000
|
||
|
|
#define FAN_CLOSE (FAN_CLOSE_WRITE | FAN_CLOSE_NOWRITE)
|
||
|
|
#define FAN_MOVE (FAN_MOVED_FROM | FAN_MOVED_TO)
|
||
|
|
#define FAN_CLOEXEC 0x01
|
||
|
|
#define FAN_NONBLOCK 0x02
|
||
|
|
#define FAN_CLASS_NOTIF 0
|
||
|
|
#define FAN_CLASS_CONTENT 0x04
|
||
|
|
#define FAN_CLASS_PRE_CONTENT 0x08
|
||
|
|
#define FAN_ALL_CLASS_BITS (FAN_CLASS_NOTIF | FAN_CLASS_CONTENT | FAN_CLASS_PRE_CONTENT)
|
||
|
|
#define FAN_UNLIMITED_QUEUE 0x10
|
||
|
|
#define FAN_UNLIMITED_MARKS 0x20
|
||
|
|
#define FAN_ENABLE_AUDIT 0x40
|
||
|
|
#define FAN_REPORT_TID 0x100
|
||
|
|
#define FAN_REPORT_FID 0x200
|
||
|
|
#define FAN_ALL_INIT_FLAGS (FAN_CLOEXEC | FAN_NONBLOCK | FAN_ALL_CLASS_BITS | FAN_UNLIMITED_QUEUE | FAN_UNLIMITED_MARKS)
|
||
|
|
#define FAN_MARK_ADD 0x01
|
||
|
|
#define FAN_MARK_REMOVE 0x02
|
||
|
|
#define FAN_MARK_DONT_FOLLOW 0x04
|
||
|
|
#define FAN_MARK_ONLYDIR 0x08
|
||
|
|
#define FAN_MARK_IGNORED_MASK 0x20
|
||
|
|
#define FAN_MARK_IGNORED_SURV_MODIFY 0x40
|
||
|
|
#define FAN_MARK_FLUSH 0x80
|
||
|
|
#define FAN_MARK_INODE 0x00
|
||
|
|
#define FAN_MARK_MOUNT 0x10
|
||
|
|
#define FAN_MARK_FILESYSTEM 0x100
|
||
|
|
#define FAN_MARK_TYPE_MASK (FAN_MARK_INODE | FAN_MARK_MOUNT | FAN_MARK_FILESYSTEM)
|
||
|
|
#define FAN_ALL_MARK_FLAGS (FAN_MARK_ADD | FAN_MARK_REMOVE | FAN_MARK_DONT_FOLLOW | FAN_MARK_ONLYDIR | FAN_MARK_MOUNT | FAN_MARK_IGNORED_MASK | FAN_MARK_IGNORED_SURV_MODIFY | FAN_MARK_FLUSH)
|
||
|
|
#define FAN_ALL_EVENTS (FAN_ACCESS | FAN_MODIFY | FAN_CLOSE | FAN_OPEN)
|
||
|
|
#define FAN_ALL_PERM_EVENTS (FAN_OPEN_PERM | FAN_ACCESS_PERM)
|
||
|
|
#define FAN_ALL_OUTGOING_EVENTS (FAN_ALL_EVENTS | FAN_ALL_PERM_EVENTS | FAN_Q_OVERFLOW)
|
||
|
|
#define FANOTIFY_METADATA_VERSION 3
|
||
|
|
#define FAN_EVENT_INFO_TYPE_FID 1
|
||
|
|
#define FAN_ALLOW 0x01
|
||
|
|
#define FAN_DENY 0x02
|
||
|
|
#define FAN_AUDIT 0x10
|
||
|
|
#define FAN_NOFD -1
|
||
|
|
#define FAN_EVENT_METADATA_LEN (sizeof(struct fanotify_event_metadata))
|
||
|
|
#define FAN_EVENT_NEXT(meta, len) ((len) -= (meta)->event_len, (struct fanotify_event_metadata*)(((char *)(meta)) + (meta)->event_len))
|
||
|
|
#define FAN_EVENT_OK(meta, len) ((long)(len) >= (long)FAN_EVENT_METADATA_LEN && (long)(meta)->event_len >= (long)FAN_EVENT_METADATA_LEN && (long)(meta)->event_len <= (long)(len))
|
||
|
|
|
||
|
|
int fanotify_init(unsigned, unsigned);
|
||
|
|
int fanotify_mark(int, unsigned, unsigned long long, int, const char *);
|
||
|
|
|
||
|
|
#ifdef __cplusplus
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
#endif
|