hook_fsnotify

hook_fsnotify is a KernelPatch Module (KPM) that hooks the fsnotify syscall on Linux kernels ranging from 5.10 up to 6.12.

---

ATTENTION: If you are already using HMKPM version 2.5.0 or later, you do not need this.

---

📖 Overview

• Name: hook_fsnotify
• Version: 1.2.0
• License: MIT
• Author: Yervant7
• Target Architecture: ARM64 (aarch64)
• Supported Kernel Range: 5.10 – 6.12 (GKI Android kernels)

---

✨ Features

• Inline‑hook of fsnotify to filter out notifications from /proc.
• Runtime control commands: enable, disable, status, toggle.
• Fully compatible with KernelPatch's symbol resolution and hooking APIs.

---

📦 Build & Release

The project uses a standard Makefile to produce a .kpm binary.

# Clone the repository
git clone --recurse-submodules https://github.com/Yervant7/hook_fsnotify.git
cd hook_fsnotify

# Build the KPM (requires aarch64-none-elf-gcc)
make

The resulting artifact will be placed in hook_fsnotify.kpm.

🛠️ Usage

After loading the KPM on the target device, you can control it using the KPM control interface.

---

📜 License

This project is licensed under the MIT License – see the LICENSE file for details.

---

🙋‍♂️ Author

Yervant7 – https://github.com/Yervant7