# 需要导入模块: from bcc import BPF [as 别名]# 或者: from bcc.BPF importget_syscall_fnname[as 别名]deftest_perf_buffer_for_each_cpu(self):self.events = []classData(ct.Structure):_fields_ = [("cpu", ct.c_ulonglong)]defcb(cpu, data, size):self.assertGreater(size, ct.sizeof(Da...
容器安全是一个庞大且牵涉极广的话题，而容器的安全隔离往往是一套纵深防御的体系，牵扯到 AppArmor、Namespace、Capabilities、Cgroup、Seccomp 等多项内核技术和特性，但安全却是一处薄弱则全盘皆输的局面，一个新的内核特性可能就会让看似无懈可击的防线存在突破口。随着云原生技术的快速发展，越来越多的容器运行时...
Fortunately, since linux 3.5, it is also possible to define advanced custom filters based on the BPF (Berkley Packet Filters). These filters may apply on any of the syscall argument but only on their value. In other words, a filter won’t be able to dereference a pointer. For example on...
#define __NR_bpf 1341 #endif /* _UAPI_ASM_IA64_UNISTD_H */ 1 change: 1 addition & 0 deletions 1 arch/ia64/kernel/entry.S Original file line numberDiff line numberDiff line change @@ -1778,6 +1778,7 @@ sys_call_table: data8 sys_renameat2 data8 sys_getrandom data8 sys_mem...
nsjail:一个轻量级的进程隔离工具,利用Linux名称空间和seccomp-bpf syscall过滤器(借助kafel bpf语言) 泪止**不住上传96KB文件格式ziplinuxsecuritychroot nsjail:一个轻量级的进程隔离工具,利用Linux名称空间和seccomp-bpf syscall过滤器(借助kafel bpf语言) (0)踩踩(0)...
NsJail is a process isolation tool for Linux. It utilizes Linux namespace subsystem, resource limits, and the seccomp-bpf syscall filters of the Linux kernel. It can help you with (among other things): Isolatingnetworking services(e.g. web, time, DNS), by isolating them from the rest of...
+++ b/tools/testing/selftests/bpf/prog_tests/uprobe_syscall.c @@ -7,7 +7,10 @@ #include <unistd.h> #include <asm/ptrace.h> #include <linux/compiler.h> +#include <linux/stringify.h> +#include <sys/wait.h> #include "uprobe_syscall.skel.h" ...
+void test_uprobe_syscall(void) +{ + if (test__start_subtest("uretprobe_regs_equal")) + test_uretprobe_regs_equal(); +} diff --git a/tools/testing/selftests/bpf/progs/uprobe_syscall.c b/tools/testing/selftests/bpf/progs/uprobe_syscall.c ...
在下文中一共展示了BPF.get_syscall_prefix方法的1个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的Python代码示例。 示例1: TestKprobeMaxactive ▲点赞 9▼ # 需要导入模块: from bcc import BPF [as 别名]# 或者: from bcc.BPF import...
Linux kernel source tree. Contribute to intel-lab-lkp/linux development by creating an account on GitHub.