diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-21 11:51:36 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-21 11:51:36 +0300 |
| commit | 3eb3d81f7d4a8924c902386b066eaf9e1da1e68f (patch) | |
| tree | 01bc90e495f5df7401b033c00bb46b670d8cf7f8 /internal/tracepoints | |
| parent | e05a19f5847693600f0c424b699d94594306c2d7 (diff) | |
67 add seccomp and module trace kinds
Diffstat (limited to 'internal/tracepoints')
| -rw-r--r-- | internal/tracepoints/dimension_selector_test.go | 15 | ||||
| -rw-r--r-- | internal/tracepoints/generated_tracepoints.go | 6 |
2 files changed, 18 insertions, 3 deletions
diff --git a/internal/tracepoints/dimension_selector_test.go b/internal/tracepoints/dimension_selector_test.go index 388ec12..2ca65c6 100644 --- a/internal/tracepoints/dimension_selector_test.go +++ b/internal/tracepoints/dimension_selector_test.go @@ -93,6 +93,21 @@ func TestParseSelectorWithDimensionsMemKindIncludesMlock(t *testing.T) { } } +func TestParseSelectorWithDimensionsSeccompKindOnly(t *testing.T) { + sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ + TraceKinds: "seccomp", + }) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !sel.ShouldAttach("sys_enter_seccomp") { + t.Fatal("expected seccomp to be attached for seccomp kind") + } + if sel.ShouldAttach("sys_enter_openat") { + t.Fatal("expected openat to be excluded when only seccomp kind is enabled") + } +} + func TestParseSelectorWithDimensionsSyscallOnly(t *testing.T) { sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ TraceSyscalls: "openat", diff --git a/internal/tracepoints/generated_tracepoints.go b/internal/tracepoints/generated_tracepoints.go index b4fb1b0..a144a08 100644 --- a/internal/tracepoints/generated_tracepoints.go +++ b/internal/tracepoints/generated_tracepoints.go @@ -1139,7 +1139,7 @@ var syscallKinds = map[string]string{ "connect": "fd", "copy_file_range": "fd", "creat": "pathname", - "delete_module": "null", + "delete_module": "module", "dup": "fd", "dup2": "fd", "dup3": "dup3", @@ -1221,7 +1221,7 @@ var syscallKinds = map[string]string{ "getuid": "null", "getxattr": "pathname", "getxattrat": "pathname", - "init_module": "null", + "init_module": "module", "inotify_add_watch": "fd", "inotify_init": "eventfd", "inotify_init1": "eventfd", @@ -1384,7 +1384,7 @@ var syscallKinds = map[string]string{ "sched_setparam": "null", "sched_setscheduler": "null", "sched_yield": "null", - "seccomp": "null", + "seccomp": "seccomp", "select": "poll", "semctl": "null", "semget": "null", |