File was accessed (e.g., read(2), execve(2)).
Metadata changed—for example, permissions (e.g., chmod(2)), timestamps (e.g., utimensat(2)), extended attributes (setxattr(2)), link count (since Linux 2.6.25; e.g., for the target of link(2) and for unlink(2)), and user/group ID (e.g., chown(2)).
File or directory not opened for writing was closed.
File opened for writing was closed.
File/directory created in watched directory (e.g., open(2) O_CREAT, mkdir(2), link(2), symlink(2), bind(2) on a UNIX domain socket).
File/directory deleted from watched directory.
Watched file/directory was itself deleted. (This event also occurs if an object is moved to another filesystem, since mv(1) in effect copies the file to the other filesystem and then deletes it from the original filesys‐ tem.) In addition, an IN_IGNORED event will subsequently be generated for the watch descriptor.
File was modified (e.g., write(2), truncate(2)).
Watched file/directory was itself moved.
File or directory was opened.
An overflow occured. Unknown what events actually triggered.
Occurs when a file or folder inside a folder is renamed.