summaryrefslogtreecommitdiff
path: root/internal/generate/bpfhandler.go
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-05-21 11:45:09 +0300
committerPaul Buetow <paul@buetow.org>2026-05-21 11:45:09 +0300
commit8bd5f17ae2cd662b21fcd45a849c4b701a3aa40f (patch)
tree338b145f35995aa5db1726f93f862a79a9de7a2a /internal/generate/bpfhandler.go
parentc58aa139f5e7252aefb1bcacb5fa8b9ea8cdcdef (diff)
g7 classify fd-from-air eventfd users
Diffstat (limited to 'internal/generate/bpfhandler.go')
-rw-r--r--internal/generate/bpfhandler.go10
1 files changed, 10 insertions, 0 deletions
diff --git a/internal/generate/bpfhandler.go b/internal/generate/bpfhandler.go
index 85377f1..fb4a4e3 100644
--- a/internal/generate/bpfhandler.go
+++ b/internal/generate/bpfhandler.go
@@ -262,6 +262,16 @@ func generateExtraEventfd(f *Format, isEnter bool) string {
if isEnter {
flagsExpr := "0"
switch f.Name {
+ case "sys_enter_epoll_create":
+ flagsExpr = "(__s32)ctx->args[0]"
+ case "sys_enter_epoll_create1":
+ flagsExpr = "(__s32)ctx->args[0]"
+ case "sys_enter_inotify_init1":
+ flagsExpr = "(__s32)ctx->args[0]"
+ case "sys_enter_fanotify_init":
+ flagsExpr = "(__s32)ctx->args[0]"
+ case "sys_enter_landlock_create_ruleset":
+ flagsExpr = "(__s32)ctx->args[2]"
case "sys_enter_eventfd2":
flagsExpr = "(__s32)ctx->args[1]"
case "sys_enter_memfd_create":