diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-20 23:42:12 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-20 23:42:12 +0300 |
| commit | be6d4e8ffc722bf0d36c5b01ff46f817539a1525 (patch) | |
| tree | 7bb0aeb51e29cfbc6735af15bb812b888f4b3574 /internal/generate/classify.go | |
| parent | 2156d6e51b18e29fe8dfe8e1a519e1a84e0a1fe6 (diff) | |
task-47: add KindExec for execve paths
Diffstat (limited to 'internal/generate/classify.go')
| -rw-r--r-- | internal/generate/classify.go | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/internal/generate/classify.go b/internal/generate/classify.go index 77bab7e..af7d78d 100644 --- a/internal/generate/classify.go +++ b/internal/generate/classify.go @@ -9,6 +9,7 @@ const ( KindFd KindOpen KindMqOpen + KindExec KindPathname KindName KindRet @@ -193,6 +194,14 @@ func classifyNameOnly(name string) (ClassificationResult, bool) { return ClassificationResult{Kind: KindFd}, true case "sys_enter_mq_getsetattr": return ClassificationResult{Kind: KindFd}, true + case "sys_enter_execve": + return ClassificationResult{Kind: KindExec}, true + case "sys_enter_execveat": + return ClassificationResult{Kind: KindExec}, true + case "sys_enter_exit": + return ClassificationResult{Kind: KindNull}, true + case "sys_enter_exit_group": + return ClassificationResult{Kind: KindNull}, true } if strings.HasPrefix(name, "sys_enter_io_") { return ClassificationResult{Kind: KindNull}, true |