8000 add syscall support for print_mem_dump by AsafEitani · Pull Request #2903 · aquasecurity/tracee · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

add syscall support for print_mem_dump #2903

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 27, 2023
Merged

add syscall support for print_mem_dump #2903

merged 1 commit into from
Mar 27, 2023

Conversation

AsafEitani
Copy link
Contributor

1. Explain what the PR does

add support to syscalls for the print_mem_dump event.

2. Explain how to test it

tracee-ebpf -f e=print_mem_dump -f print_mem_dump.args.symbol_name=execve
see the event pop up.

3. Other comments

@yanivagman yanivagman linked an issue Mar 23, 2023 that may be closed by this pull request
support syscalls in print_mem_dump event #2835
Closed
@AsafEitani AsafEitani force-pushed the add_syscall_inline_hooks branch from 663b176 to 2b3b676 Compare March 27, 2023 11:53
@AsafEitani AsafEitani marked this pull request as ready for review March 27, 2023 18:10
@AsafEitani AsafEitani requested a review from yanivagman March 27, 2023 18:10
yanivagman
yanivagman approved these changes Mar 27, 2023
View reviewed changes
Copy link
Collaborator
@yanivagman yanivagman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yanivagman yanivagman merged commit bf36393 into aquasecurity:main Mar 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@yanivagman yanivagman yanivagman approved these changes

Assignees

@AsafEitani AsafEitani

Labels
area/ebpf
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

support syscalls in print_mem_dump event
2 participants
@AsafEitani @yanivagman
0