diff options
Diffstat (limited to 'fs-tracer-ebpf/src/syscalls')
| -rw-r--r-- | fs-tracer-ebpf/src/syscalls/open.rs | 8 | ||||
| -rw-r--r-- | fs-tracer-ebpf/src/syscalls/write.rs | 2 |
2 files changed, 5 insertions, 5 deletions
diff --git a/fs-tracer-ebpf/src/syscalls/open.rs b/fs-tracer-ebpf/src/syscalls/open.rs index 6df5039..41f0c5e 100644 --- a/fs-tracer-ebpf/src/syscalls/open.rs +++ b/fs-tracer-ebpf/src/syscalls/open.rs @@ -1,4 +1,4 @@ -use aya_bpf::{ +use aya_ebpf::{ cty::{c_char, c_int, c_long}, helpers::{ bpf_get_current_task_btf, bpf_probe_read_kernel, bpf_probe_read_kernel_str_bytes, @@ -68,9 +68,9 @@ unsafe fn handle_sys_open_enter(ctx: TracePointContext) -> Result<c_long, c_long info!(&ctx, "filename: {} dfd: {}", filename, args.dfd); - if !filename.is_empty() && filename.chars().next().unwrap_unchecked() == '/' { - return Ok(0); - } + // if !filename.is_empty() && filename.chars().next().unwrap_unchecked() == '/' { + // return Ok(0); + //} info!(&ctx, "relative call!"); let pwd = get_task_pwd(&ctx, task)?; diff --git a/fs-tracer-ebpf/src/syscalls/write.rs b/fs-tracer-ebpf/src/syscalls/write.rs index d9745a4..b7e7a89 100644 --- a/fs-tracer-ebpf/src/syscalls/write.rs +++ b/fs-tracer-ebpf/src/syscalls/write.rs @@ -1,5 +1,5 @@ use core::ffi::c_size_t; -use aya_bpf::{cty::{c_char, c_uint}, helpers::{bpf_probe_read_kernel_str_bytes, bpf_probe_read_user_str_bytes}}; +use aya_ebpf::{cty::{c_char, c_uint}, helpers::{bpf_probe_read_kernel_str_bytes, bpf_probe_read_user_str_bytes}}; use crate::*; |