43 lines
		
	
	
		
			827 B
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			43 lines
		
	
	
		
			827 B
		
	
	
	
		
			C
		
	
	
	
	
	
// SPDX-License-Identifier: GPL-2.0
 | 
						|
/* Copyright (c) 2019 Facebook */
 | 
						|
#include <stdbool.h>
 | 
						|
#include <stddef.h>
 | 
						|
#include <linux/bpf.h>
 | 
						|
#include <linux/ptrace.h>
 | 
						|
#include <bpf/bpf_helpers.h>
 | 
						|
#include <bpf/bpf_tracing.h>
 | 
						|
 | 
						|
struct task_struct;
 | 
						|
 | 
						|
SEC("kprobe/__set_task_comm")
 | 
						|
int BPF_KPROBE(prog1, struct task_struct *tsk, const char *buf, bool exec)
 | 
						|
{
 | 
						|
	return !tsk;
 | 
						|
}
 | 
						|
 | 
						|
SEC("kretprobe/__set_task_comm")
 | 
						|
int BPF_KRETPROBE(prog2, int ret)
 | 
						|
{
 | 
						|
	return ret;
 | 
						|
}
 | 
						|
 | 
						|
SEC("raw_tp/task_rename")
 | 
						|
int prog3(struct bpf_raw_tracepoint_args *ctx)
 | 
						|
{
 | 
						|
	return !ctx->args[0];
 | 
						|
}
 | 
						|
 | 
						|
SEC("fentry/__set_task_comm")
 | 
						|
int BPF_PROG(prog4, struct task_struct *tsk, const char *buf, bool exec)
 | 
						|
{
 | 
						|
	return 0;
 | 
						|
}
 | 
						|
 | 
						|
SEC("fexit/__set_task_comm")
 | 
						|
int BPF_PROG(prog5, struct task_struct *tsk, const char *buf, bool exec)
 | 
						|
{
 | 
						|
	return 0;
 | 
						|
}
 | 
						|
 | 
						|
char _license[] SEC("license") = "GPL";
 |