From ArchWiki
Jump to: navigation, search

incron is a daemon which monitors filesystem events and executes commands defined in system and user tables.


Install the incron package.

Activation and Autostart

After installation, the daemmon will not be enabled by default. It can be enabled using systemctl.


Incrontabs should never be edited directly; instead, users should use the incrontab program to work with their incrontabs.

Using incrontab

To view their incrontabs, users should issue the command:

$ incrontab -l

To edit their incrontabs, they should use:

$ incrontab -e

To remove their incrontabs, they may use:

$ incrontab -r

To reload incrond, use:

$ incrontab -d

To edit another users incrontab, isue the following command as root:

$ incrontab -u user

Incrontab format

Each row in an incrotab file is a table that the dameon runs when an event happens to a certain directory or file.

The basic format for an incrontab is:

path mask command
  • path is the directory or file that incrond will monitor for changes.
  • mask is the type of filesystem event that incrond will monitor for. This paramter can be seperated by commas.
  • command is the commmand to be run after the specified filesystem event(s) occur.

Mask types

Incrontab uses mask types to specify which file system event to monitor for.

To trigger an command if a file is accessed or read:


To trigger an command if file attributes change (e.g. timestamps, permissons):


To trigger a command if a file opened for writing is closed:


To trigger a command if a file or directory open for writing is closed:


To trigger a command if a file is created in a watched directory:


To trigger a command if a file or directory is deleted from the watched directory:


To tirgger a command if a file was modified: