diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-30 17:12:25 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-30 17:12:25 +0300 |
| commit | e462a4d9963a2949f0670a00a013dd362b5219d1 (patch) | |
| tree | c867fda30f98a31bc507f0a25c35e373243b7068 /internal/generate/family.go | |
| parent | 07927004d6403dc88a8c24b2751d845ec1765376 (diff) | |
kexec_load: classify into Security family with its sibling
kexec_load(2) and kexec_file_load are documented together on the same
man page and both load a new kernel for later execution by reboot(2).
kexec_file_load was already FamilySecurity, but kexec_load fell through
to FamilyMisc. Move kexec_load to FamilySecurity so the siblings share
a family. Kind classification was already correct: kexec_load takes raw
user pointers (KindNull, no fd/path) while kexec_file_load takes fds
(KindFd); the return value (long 0/-1, no byte count) stays UNCLASSIFIED.
Update docs/syscall-tracing-plan.md to match, regenerate artifacts, and
add lock-in tests for the family and UNCLASSIFIED return of both kexec
syscalls plus reboot.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Diffstat (limited to 'internal/generate/family.go')
| -rw-r--r-- | internal/generate/family.go | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/internal/generate/family.go b/internal/generate/family.go index daa7ab8..301c638 100644 --- a/internal/generate/family.go +++ b/internal/generate/family.go @@ -184,7 +184,12 @@ var syscallFamilies = map[string]SyscallFamily{ "add_key": FamilySecurity, "bpf": FamilySecurity, "capget": FamilySecurity, "capset": FamilySecurity, "delete_module": FamilySecurity, "finit_module": FamilySecurity, "getrandom": FamilySecurity, "init_module": FamilySecurity, - "kexec_file_load": FamilySecurity, "keyctl": FamilySecurity, + // kexec_load and kexec_file_load are documented together on the same man + // page (kexec_load(2)): both load a new kernel for later execution by + // reboot(2). They belong in the same family even though kexec_load takes + // raw user pointers (KindNull) while kexec_file_load takes fds (KindFd). + "kexec_file_load": FamilySecurity, "kexec_load": FamilySecurity, + "keyctl": FamilySecurity, "landlock_add_rule": FamilySecurity, "landlock_create_ruleset": FamilySecurity, "landlock_restrict_self": FamilySecurity, "lookup_dcookie": FamilySecurity, // lsm_* are the Linux Security Module (LSM) introspection syscalls |