Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update(driver): update syscalls tables and driver report. #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

update(driver): update syscalls tables and driver report. #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
417 changes: 417 additions & 0 deletions docs/report.md
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion driver/SCHEMA_VERSION
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
2.3.0
2.3.1
48 changes: 47 additions & 1 deletion driver/ppm_events_public.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1630,7 +1630,53 @@ enum extra_event_prog_code
PPM_SC_X(SCHED_SWITCH, 397) \
PPM_SC_X(PAGE_FAULT_USER, 398) \
PPM_SC_X(PAGE_FAULT_KERNEL, 399) \
PPM_SC_X(SIGNAL_DELIVER, 400)
PPM_SC_X(SIGNAL_DELIVER, 400) \
PPM_SC_X(PCICONFIG_READ, 401) \
PPM_SC_X(MULTIPLEXER, 402) \
PPM_SC_X(FUTEX_WAIT, 403) \
PPM_SC_X(PCICONFIG_WRITE, 404) \
PPM_SC_X(SUBPAGE_PROT, 405) \
PPM_SC_X(GETXATTRAT, 406) \
PPM_SC_X(MAP_SHADOW_STACK, 407) \
PPM_SC_X(RTAS, 408) \
PPM_SC_X(OLDOLDUNAME, 409) \
PPM_SC_X(SWAPCONTEXT, 410) \
PPM_SC_X(READDIR, 411) \
PPM_SC_X(RISCV_FLUSH_ICACHE, 412) \
PPM_SC_X(LSM_LIST_MODULES, 413) \
PPM_SC_X(URETPROBE, 414) \
PPM_SC_X(SPU_RUN, 415) \
PPM_SC_X(SIGRETURN, 416) \
PPM_SC_X(SPU_CREATE, 417) \
PPM_SC_X(S390_GUARDED_STORAGE, 418) \
PPM_SC_X(LISTXATTRAT, 419) \
PPM_SC_X(SIGSUSPEND, 420) \
PPM_SC_X(OLDFSTAT, 421) \
PPM_SC_X(FUTEX_REQUEUE, 422) \
PPM_SC_X(SIGACTION, 423) \
PPM_SC_X(FCHMODAT2, 424) \
PPM_SC_X(SYNC_FILE_RANGE2, 425) \
PPM_SC_X(RISCV_HWPROBE, 426) \
PPM_SC_X(OLDLSTAT, 427) \
PPM_SC_X(S390_PCI_MMIO_WRITE, 428) \
PPM_SC_X(SETXATTRAT, 429) \
PPM_SC_X(REMOVEXATTRAT, 430) \
PPM_SC_X(LSM_GET_SELF_ATTR, 431) \
PPM_SC_X(SWITCH_ENDIAN, 432) \
PPM_SC_X(MSEAL, 433) \
PPM_SC_X(S390_STHYI, 434) \
PPM_SC_X(S390_PCI_MMIO_READ, 435) \
PPM_SC_X(OLDSTAT, 436) \
PPM_SC_X(S390_RUNTIME_INSTR, 437) \
PPM_SC_X(VM86, 438) \
PPM_SC_X(LISTMOUNT, 439) \
PPM_SC_X(SYS_DEBUG_SETCONTEXT, 440) \
PPM_SC_X(FUTEX_WAKE, 441) \
PPM_SC_X(TIMERFD, 442) \
PPM_SC_X(STATMOUNT, 443) \
PPM_SC_X(LSM_SET_SELF_ATTR, 444) \
PPM_SC_X(CACHESTAT, 445) \
PPM_SC_X(PCICONFIG_IOBASE, 446)

typedef enum {
#define PPM_SC_X(name, value) PPM_SC_##name = (value),
Expand Down
66 changes: 63 additions & 3 deletions driver/syscall_compat_aarch64.h
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,18 @@
// SPDX-License-Identifier: GPL-2.0-only OR MIT
/*

Copyright (C) 2023 The Falco Authors.

This file is dual licensed under either the MIT or GPL 2. See MIT.txt
or GPL2.txt for full copies of the license.

*/

/*
* This file was automatically created by syscalls-bumper (https://github.com/falcosecurity/syscalls-bumper).")
* DO NOT EDIT THIS FILE MANUALLY.")
*/

#pragma once
#ifndef __NR_io_setup
#define __NR_io_setup 0
Expand Down Expand Up @@ -125,9 +140,6 @@
#ifndef __NR_pivot_root
#define __NR_pivot_root 41
#endif
#ifndef __NR_nfsservctl
#define __NR_nfsservctl 42
#endif
#ifndef __NR_statfs
#define __NR_statfs 43
#endif
Expand Down Expand Up @@ -917,3 +929,51 @@
#ifndef __NR_set_mempolicy_home_node
#define __NR_set_mempolicy_home_node 450
#endif
#ifndef __NR_cachestat
#define __NR_cachestat 451
#endif
#ifndef __NR_fchmodat2
#define __NR_fchmodat2 452
#endif
#ifndef __NR_map_shadow_stack
#define __NR_map_shadow_stack 453
#endif
#ifndef __NR_futex_wake
#define __NR_futex_wake 454
#endif
#ifndef __NR_futex_wait
#define __NR_futex_wait 455
#endif
#ifndef __NR_futex_requeue
#define __NR_futex_requeue 456
#endif
#ifndef __NR_statmount
#define __NR_statmount 457
#endif
#ifndef __NR_listmount
#define __NR_listmount 458
#endif
#ifndef __NR_lsm_get_self_attr
#define __NR_lsm_get_self_attr 459
#endif
#ifndef __NR_lsm_set_self_attr
#define __NR_lsm_set_self_attr 460
#endif
#ifndef __NR_lsm_list_modules
#define __NR_lsm_list_modules 461
#endif
#ifndef __NR_mseal
#define __NR_mseal 462
#endif
#ifndef __NR_setxattrat
#define __NR_setxattrat 463
#endif
#ifndef __NR_getxattrat
#define __NR_getxattrat 464
#endif
#ifndef __NR_listxattrat
#define __NR_listxattrat 465
#endif
#ifndef __NR_removexattrat
#define __NR_removexattrat 466
#endif
Loading