mirror of https://github.com/aya-rs/aya
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
31 lines
840 B
C
31 lines
840 B
C
// clang-format off
|
|
#include <vmlinux.h>
|
|
#include <bpf/bpf_helpers.h>
|
|
#include <bpf/bpf_core_read.h>
|
|
#include <bpf/bpf_tracing.h>
|
|
// clang-format on
|
|
|
|
char _license[] SEC("license") = "GPL";
|
|
|
|
struct {
|
|
__uint(type, BPF_MAP_TYPE_TASK_STORAGE);
|
|
__uint(map_flags, BPF_F_NO_PREALLOC);
|
|
__type(key, int);
|
|
__type(value, __u32);
|
|
} task_storage SEC(".maps");
|
|
|
|
extern void bpf_rcu_read_lock(void) __ksym;
|
|
extern void bpf_rcu_read_unlock(void) __ksym;
|
|
|
|
SEC("tp_btf/sys_enter")
|
|
int BPF_PROG(sys_enter, struct pt_regs *regs, long id) {
|
|
__u32 value = 1;
|
|
struct task_struct *task = bpf_get_current_task_btf();
|
|
bpf_rcu_read_lock();
|
|
struct task_struct *group_leader = task->group_leader;
|
|
bpf_task_storage_get(&task_storage, group_leader, &value,
|
|
BPF_LOCAL_STORAGE_GET_F_CREATE);
|
|
bpf_rcu_read_unlock();
|
|
return 0;
|
|
}
|