Fanotify - Monitoring Filesystem Events A simple C example of the fanotify system calls for linux. Building make Running To monitor all the close events on the root file-system run: sudo ./fanotify CLOSE MOUNT /