fanotify

Documentation

Index

• type Event
• type Monitor
  • func NewMonitor(ctx context.Context, del mondel.Publisher, artifactsDir string, ...) Monitor

Types

type Event

type Event struct {
	ID      uint32
	Pid     int32
	File    string
	IsRead  bool
	IsWrite bool
}

Event is file operation event

type Monitor

type Monitor interface {
	// Starts the long running monitoring. The method itself is not
	// blocking and not reentrant!
	Start() error

	// Cancels the underlying ptrace execution context but doesn't
	// make the current monitor done immediately. You still need to await
	// the final cleanup with <-mon.Done() before accessing the status.
	Cancel()

	// With Done clients can await for the monitoring completion.
	// The method is reentrant - every invocation returns the same
	// instance of the channel.
	Done() <-chan struct{}

	Status() (*report.FanMonitorReport, error)
}

func NewMonitor

func NewMonitor(
	ctx context.Context,
	del mondel.Publisher,
	artifactsDir string,
	mountPoint string,
	includeNew bool,
	origPaths map[string]struct{},
	errorCh chan<- error,
) Monitor