aboutsummaryrefslogtreecommitdiffstats
path: root/sys/linux/bpf_trace.txt
Commit message (Collapse)AuthorAgeFilesLines
* sys/linux: enable some disabled syscalls in snapshot modeDmitry Vyukov2026-01-021-2/+4
| | | | | | Enable some previously disabled syscalls in snapshot mode that look safe for snapshot mode. In snapshot mode we don't rely on the actual networking, and should be able to survive runner process kills, and disk shutdown.
* all: replace egrep with grep -EAndrew Donnellan2025-12-101-1/+1
| | | | | | | | | | The egrep command has been deprecated in GNU Grep since 2007, and nowadays using egrep rather than grep -E will print a warning to the user, which is very annoying. Replace all usages of egrep with grep -E. Signed-off-by: Andrew Donnellan <ajd@linux.ibm.com>
* sys/linux: cover BPF cookie in raw tracepoint programsPaul Chaignon2024-09-091-0/+2
| | | | | | | This field was added upstream in commit [1]. 1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=68ca5d4eebb8 Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
* sys/linux: cover BPF tokensPaul Chaignon2024-09-091-1/+1
| | | | | | | | | | | | | | | | | | | The new BPF_TOKEN_CREATE bpf(2) command was introduced in commit [1] upstream. This command takes a BPF filesystem fd and returns a BPF token [2]. This token can then be passed to commands BPF_PROG_LOAD, BPF_MAP_CREATE, and BPF_BTF_LOAD and the kernel will use it to check if the operation is allowed. What operations a token allows is defined by the mount options of the BPF filesystem. No flags are currently supported for the BPF_TOKEN_CREATE command. The fd should point to the BPF filesystem, but we don't have a specific resource for this yet so just point to a generic fd. This command also doesn't add support for the new mount options. 1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=35f96de04127 2 - https://lwn.net/Articles/947173/ Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
* sys/linux: remove lock_acquire tracepointDmitry Vyukov2022-06-021-4/+9
| | | | | It leads to immidiate machine hang with no diagnostics. Remove it from the list.
* sys/linux: update list of tracepointsDmitry Vyukov2022-06-021-4/+4
| | | | | Regenerate the list on upstream commit d1dc87763f406d. Also sort tracepoints for determinism.
* sys/linux: improve descriptions of bpf tracing (#2076)bobogei811232020-09-091-0/+73
- Rename bpf_lsm to bpf_trace and put all bpf program types that use BPF_RAW_TRACEPOINT_OPEN here. - Add descriptions for types RAW_TRACEPOINT(_WRITABLE), BPF_TRACING and BPF_EXT. - Add the hook names for RAW_TRACEPOINT(_WRITABLE).