From 3eb3d81f7d4a8924c902386b066eaf9e1da1e68f Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Thu, 21 May 2026 11:51:36 +0300 Subject: 67 add seccomp and module trace kinds --- internal/generate/classify.go | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'internal/generate/classify.go') diff --git a/internal/generate/classify.go b/internal/generate/classify.go index 0bfac0c..fdffdeb 100644 --- a/internal/generate/classify.go +++ b/internal/generate/classify.go @@ -31,6 +31,8 @@ const ( KindKeyctl KindPtrace KindPerfOpen + KindSeccomp + KindModule ) func (k TracepointKind) MetadataName() string { @@ -85,6 +87,10 @@ func (k TracepointKind) MetadataName() string { return "ptrace" case KindPerfOpen: return "perf-open" + case KindSeccomp: + return "seccomp" + case KindModule: + return "module" default: return "none" } @@ -314,6 +320,18 @@ func classifyNameOnly(name string) (ClassificationResult, bool) { return ClassificationResult{Kind: KindPtrace}, true case "sys_enter_perf_event_open": return ClassificationResult{Kind: KindPerfOpen}, true + case "sys_enter_seccomp": + return ClassificationResult{Kind: KindSeccomp}, true + case "sys_exit_seccomp": + return ClassificationResult{Kind: KindSeccomp}, true + case "sys_enter_init_module": + return ClassificationResult{Kind: KindModule}, true + case "sys_exit_init_module": + return ClassificationResult{Kind: KindModule}, true + case "sys_enter_delete_module": + return ClassificationResult{Kind: KindModule}, true + case "sys_exit_delete_module": + return ClassificationResult{Kind: KindModule}, true case "sys_enter_pidfd_send_signal": return ClassificationResult{Kind: KindFd}, true case "sys_enter_kexec_file_load": -- cgit v1.2.3