fanotify

Cross-platform file watcher written in Go for native concurrent monitoring

Golang fanotify example

Fanotify API for Go

Python wrapper for Linux fanotify - monitoring filesystem events

File Descriptors Rust crate

A C++ interface for linux monitoring filesystem events

Modern wrapper for fanotify

Runtime integrity guard: detect and block Linux page cache tampering (Copy Fail, Dirty Pipe, Dirty Frag) via O_DIRECT + fanotify. Includes 7 host-side exploitation PoCs.

Rust crate for Linux epoll

Minimalist cross-platform app to watch a directory for changes.

Kernel-level read gate for AI agents — protected file opens are denied or routed through off-band consent before bytes reach the agent. Linux (fanotify) + macOS (Endpoint Security).

Transparent Linux recycle bin and rm undelete daemon. 4-layer interception (PATH shim, LD_PRELOAD, seccomp, fanotify). FreeDesktop.org trash spec compliant.

Rust port of the Linux 4.0.4 `man 7 fanotify` example program source (roughly).

Monitors a given directory with all its files for changes

High-performance Linux file event gateway: fanotify notifications → NDJSON over Unix Domain Socket, for polyglot consumers.

Example use of fanotify in LXD

Linux fanotify in python

Filesystem notifications and advisory file locks for Go. Pure Go, no cgo, no dependencies beyond golang.org/x/sys. inotify, fanotify, kqueue, ReadDirectoryChangesW and polling behind one API, each verified on real hardware.

Open-source Linux endpoint security agent built with Go and eBPF for real-time kernel event monitoring, log streaming, and centralized security visibility.

ClamAV configuration files for filesystem scanning on demand.