tetragon: Add override support for generic multi kprobe

Adding override support for kprobes attached with kprobe.multi interface.

Signed-off-by: Jiri Olsa <[email protected]>

pkg/sensors/tracing/generickprobe.go

@@ -118,6 +118,9 @@ type genericKprobe struct {
 
 	// policyName is the name of the policy that this tracepoint belongs to
 	policyName string
+
+	// is there override defined for the kprobe
+	hasOverride bool
 }
 
 // pendingEvent is an event waiting to be merged with another event.
@@ -495,8 +498,6 @@ func createGenericKprobeSensor(
 			}
 		}
 
-		hasOverride := selectors.HasOverride(f)
-
 		// Write attributes into BTF ptr for use with load
 		if !setRetprobe {
 			setRetprobe = f.Return
@@ -527,6 +528,7 @@ func createGenericKprobeSensor(
 			pendingEvents:     nil,
 			tableId:           idtable.UninitializedEntryID,
 			policyName:        policyName,
+			hasOverride:       selectors.HasOverride(f),
 		}
 
 		// Parse Filters into kernel filter logic
@@ -567,7 +569,7 @@ func createGenericKprobeSensor(
 			pinProg,
 			"generic_kprobe").
 			SetLoaderData(kprobeEntry.tableId)
-		load.Override = hasOverride
+		load.Override = kprobeEntry.hasOverride
 		progs = append(progs, load)
 
 		fdinstall := program.MapBuilderPin("fdinstall_map", sensors.PathJoin(sensorPath, "fdinstall_map"), load)
@@ -726,8 +728,13 @@ func loadMultiKprobeSensor(ids []idtable.EntryID, bpfDir, mapDir string, load *p
 
 		data.Symbols = append(data.Symbols, gk.funcName)
 		data.Cookies = append(data.Cookies, uint64(index))
+
+		if gk.hasOverride && !load.RetProbe {
+			data.Overrides = append(data.Overrides, gk.funcName)
+		}
 	}
 
+	load.Override = len(data.Overrides) > 0
 	load.SetAttachData(data)
 
 	if err := program.LoadMultiKprobeProgram(bpfDir, mapDir, load, verbose); err == nil {