Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update(driver): update syscalls tables and driver report. #2217

Closed
wants to merge 1 commit into from
Closed

update(driver): update syscalls tables and driver report. #2217

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/report.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,7 @@
| gettimeofday | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| getuid | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| getxattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| getxattrat | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| init_module | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| inotify_add_watch | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| inotify_init | 🟢 | ppc64le,s390x,x86_64 |
Expand Down Expand Up @@ -151,6 +152,7 @@
| listen | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| listmount | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| listxattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| listxattrat | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| llistxattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| lookup_dcookie | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| lremovexattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
Expand Down Expand Up @@ -259,6 +261,7 @@
| recvmsg | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| remap_file_pages | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| removexattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| removexattrat | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| rename | 🟢 | ppc64le,s390x,x86_64 |
| renameat | 🟢 | aarch64,ppc64le,s390x,x86_64 |
| renameat2 | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
Expand Down Expand Up @@ -330,6 +333,7 @@
| settimeofday | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| setuid | 🟢 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| setxattr | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| setxattrat | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| sgetmask | 🟡 | ppc64le |
| shmat | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
| shmctl | 🟡 | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
Expand Down
2 changes: 1 addition & 1 deletion driver/SCHEMA_VERSION
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
3.4.0
3.4.1
6 changes: 5 additions & 1 deletion driver/ppm_events_public.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1989,7 +1989,11 @@ enum sys_exit_extra_code {
PPM_SC_X(LSM_SET_SELF_ATTR, 440) \
PPM_SC_X(LSM_LIST_MODULES, 441) \
PPM_SC_X(MSEAL, 442) \
PPM_SC_X(URETPROBE, 443)
PPM_SC_X(URETPROBE, 443) \
PPM_SC_X(LISTXATTRAT, 444) \
PPM_SC_X(GETXATTRAT, 445) \
PPM_SC_X(SETXATTRAT, 446) \
PPM_SC_X(REMOVEXATTRAT, 447)

typedef enum {
#define PPM_SC_X(name, value) PPM_SC_##name = (value),
Expand Down
12 changes: 12 additions & 0 deletions driver/syscall_compat_aarch64.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -965,3 +965,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
12 changes: 12 additions & 0 deletions driver/syscall_compat_loongarch64.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -953,3 +953,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
12 changes: 12 additions & 0 deletions driver/syscall_compat_ppc64le.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1196,3 +1196,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
12 changes: 12 additions & 0 deletions driver/syscall_compat_riscv64.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -968,3 +968,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
12 changes: 12 additions & 0 deletions driver/syscall_compat_s390x.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1124,3 +1124,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
12 changes: 12 additions & 0 deletions driver/syscall_compat_x86_64.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1103,3 +1103,15 @@ or GPL2.txt for full copies of the license.
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
4 changes: 4 additions & 0 deletions driver/syscall_ia32_64_map.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -454,4 +454,8 @@ const int g_ia32_64_map[SYSCALL_TABLE_SIZE] = {
[460] = 460,
[461] = 461,
[462] = 462,
[463] = 463,
[464] = 464,
[465] = 465,
[466] = 466,
};
12 changes: 12 additions & 0 deletions driver/syscall_table.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1018,4 +1018,16 @@ const struct syscall_evt_pair g_syscall_table[SYSCALL_TABLE_SIZE] = {
#ifdef __NR_uretprobe
[__NR_uretprobe - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_URETPROBE},
#endif
#ifdef __NR_listxattrat
[__NR_listxattrat - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_LISTXATTRAT},
#endif
#ifdef __NR_getxattrat
[__NR_getxattrat - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_GETXATTRAT},
#endif
#ifdef __NR_setxattrat
[__NR_setxattrat - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_SETXATTRAT},
#endif
#ifdef __NR_removexattrat
[__NR_removexattrat - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_REMOVEXATTRAT},
#endif
};
4 changes: 2 additions & 2 deletions userspace/libscap/linux/scap_ppm_sc.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ limitations under the License.
* NOTE: first 2 lines are automatically bumped by syscalls-bumper.
*/
static const ppm_sc_code *g_events_to_sc_map[] = {
[PPME_GENERIC_E] = (ppm_sc_code[]){PPM_SC_RESTART_SYSCALL,
[PPME_GENERIC_E] = (ppm_sc_code[]){PPM_SC_RESTART_SYSCALL,PPM_SC_LISTXATTRAT, PPM_SC_GETXATTRAT, PPM_SC_SETXATTRAT, PPM_SC_REMOVEXATTRAT, -1},
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This needs to be fixed in the syscalls-bumper. Will fix it asap.

PPM_SC_EXIT,
PPM_SC_TIME,
PPM_SC_GETPID,
Expand Down Expand Up @@ -296,7 +296,7 @@ static const ppm_sc_code *g_events_to_sc_map[] = {
PPM_SC_MSEAL,
PPM_SC_URETPROBE,
-1},
[PPME_GENERIC_X] = (ppm_sc_code[]){PPM_SC_RESTART_SYSCALL,
[PPME_GENERIC_X] = (ppm_sc_code[]){PPM_SC_RESTART_SYSCALL,PPM_SC_REMOVEXATTRAT, PPM_SC_LISTXATTRAT, PPM_SC_GETXATTRAT, PPM_SC_SETXATTRAT, -1},
PPM_SC_EXIT,
PPM_SC_TIME,
PPM_SC_GETPID,
Expand Down
Loading