add dentry type #3423
Open
add dentry type #3423
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
olsajiri
added
the
release-note/minor
6 tasks
Adding support to extract dentry full path via new 'dentry' type,
which presents the data as as path_arg argument.
So following spec:
spec:
kprobes:
- call: "security_path_unlink"
syscall: false
args:
- index: 1
type: "dentry"
gives you:
args{"path_arg":{"path":"/tmp/TestKprobeDentryPath4036433650/001/dentry-unlink872807283", "permission":"-rw-------"}}
Note dentry type can extract path only to the first mount point.
Note this patch is based on work of David Windsor, adding his SOB.
Signed-off-by: David Windsor <[email protected]>
Signed-off-by: Jiri Olsa <[email protected]>
Allowing dentry type to be used in the spec, so the spec validation passes. Signed-off-by: Jiri Olsa <[email protected]>
olsajiri
force-pushed
the
pr/olsajiri/dentry
branch
from
70f2282 to
6f17d57
Compare
Addinbg test for dentry path extraction. Signed-off-by: Jiri Olsa <[email protected]>
Signed-off-by: David Windsor <[email protected]>
olsajiri
force-pushed
the
pr/olsajiri/dentry
branch
from
6f17d57 to
dd8a46f
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adding support to extract dentry full path via new 'dentry' type,
which presents the data as as path_arg argument.
So following spec:
gives you:
args{"path_arg":{"path":"/tmp/TestKprobeDentryPath4036433650/001/dentry-unlink872807283", "permission":"-rw-------"}}Note dentry type can extract path only to the first mount point.
Note this patch is based on work of David Windsor, adding his SOB.