From c58aa139f5e7252aefb1bcacb5fa8b9ea8cdcdef Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Thu, 21 May 2026 11:39:18 +0300 Subject: n7 classify pidfd and misc tail syscalls --- internal/tracepoints/dimension_selector_test.go | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'internal/tracepoints/dimension_selector_test.go') diff --git a/internal/tracepoints/dimension_selector_test.go b/internal/tracepoints/dimension_selector_test.go index cd7b0f8..da88954 100644 --- a/internal/tracepoints/dimension_selector_test.go +++ b/internal/tracepoints/dimension_selector_test.go @@ -48,6 +48,21 @@ func TestParseSelectorWithDimensionsKindOnly(t *testing.T) { } } +func TestParseSelectorWithDimensionsPidfdKindOnly(t *testing.T) { + sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ + TraceKinds: "pidfd", + }) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !sel.ShouldAttach("sys_enter_pidfd_open") { + t.Fatal("expected pidfd_open to be attached for pidfd kind") + } + if sel.ShouldAttach("sys_enter_openat") { + t.Fatal("expected openat to be excluded when only pidfd kind is enabled") + } +} + func TestParseSelectorWithDimensionsSyscallOnly(t *testing.T) { sel, err := ParseSelectorWithDimensions("", "", DimensionSelectorConfig{ TraceSyscalls: "openat", -- cgit v1.2.3