fix: devcgroup

Signed-off-by: Paul Bastide <[email protected]>
IBM · Oct 31, 2024 · 5f5f8d0 · 5f5f8d0
1 parent 13d54fe
commit 5f5f8d0
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/scripts/devcgroup.bt b/scripts/devcgroup.bt
@@ -0,0 +1,16 @@
+#!/usr/bin/env bpftrace
+
+# SPDX-License-Identifier: Apache-2.0
+# inspired by https://github.com/freedge/blog/blob/44ede6a73caaaf7f8128e69eb28cfa26b37100bd/kerneltrace.md?plain=1#L55
+
+#ifndef BPFTRACE_HAVE_BTF
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/kprobes.h>
+#endif
+
+kretprobe:devcgroup_check_permission {
+  if (retval < 0) {
+    printf("PID %d, comm %s returned %ld\n", pid, comm, retval);
+  }
+}