From 956b0392dc1206dce49e6904210dfc9ae100d3e2 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Thu, 21 May 2026 17:59:33 +0300 Subject: k7 classify process control and prctl syscalls --- internal/tracepoints/dimension_selector_test.go | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'internal/tracepoints/dimension_selector_test.go') diff --git a/internal/tracepoints/dimension_selector_test.go b/internal/tracepoints/dimension_selector_test.go index 2391ba3..4eb555b 100644 --- a/internal/tracepoints/dimension_selector_test.go +++ b/internal/tracepoints/dimension_selector_test.go @@ -186,6 +186,21 @@ func TestParseSelectorWithDimensionsFutexKindOnly(t *testing.T) { } } +func TestParseSelectorWithDimensionsPrctlKindOnly(t *testing.T) { + sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ + TraceKinds: "prctl", + }) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !sel.ShouldAttach("sys_enter_prctl") { + t.Fatal("expected prctl to be attached for prctl kind") + } + if sel.ShouldAttach("sys_enter_openat") { + t.Fatal("expected openat to be excluded when only prctl kind is enabled") + } +} + func TestParseSelectorWithDimensionsSyscallOnly(t *testing.T) { sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ TraceSyscalls: "openat", -- cgit v1.2.3