---
title: fflag
framework: endpointsecurity
role: symbol
role_heading: Instance Property
path: endpointsecurity/es_event_open_t/fflag
---

# fflag

The file-opening mask as applied by the kernel.

## Declaration

```swift
var fflag: Int32
```

## Discussion

Discussion This mask differs from the oflag values used in open(2). When responding to this event, use FFLAG values such as FREAD and FWRITE instead, rather than O_RDONLY, O_RDWR and the like.

## See Also

### Inspecting Event Properties

- [file](endpointsecurity/es_event_open_t/file.md)
- [reserved](endpointsecurity/es_event_open_t/reserved.md)