Updated function and configurator manager names to the used hook.

This commit is contained in:
h3xduck
2022-01-26 13:04:23 -05:00
parent 9b366810b5
commit 2b50d376a6
9 changed files with 758 additions and 756 deletions

View File

@@ -8,30 +8,30 @@
#include "kit.skel.h"
//Connections
int attach_kprobe_ksys_read(struct kit_bpf *skel){
skel->links.kprobe_ksys_read = bpf_program__attach(skel->progs.kprobe_ksys_read);
return libbpf_get_error(skel->links.kprobe_ksys_read);
int attach_tp_sys_enter_read(struct kit_bpf *skel){
skel->links.tp_sys_enter_read = bpf_program__attach(skel->progs.tp_sys_enter_read);
return libbpf_get_error(skel->links.tp_sys_enter_read);
}
int attach_kretprobe_vfs_read(struct kit_bpf *skel){
skel->links.kretprobe_vfs_read = bpf_program__attach(skel->progs.kretprobe_vfs_read);
return libbpf_get_error(skel->links.kretprobe_vfs_read);
int attach_tp_sys_exit_read(struct kit_bpf *skel){
skel->links.tp_sys_exit_read = bpf_program__attach(skel->progs.tp_sys_exit_read);
return libbpf_get_error(skel->links.tp_sys_exit_read);
}
int attach_fs_all(struct kit_bpf *skel){
return attach_kprobe_ksys_read(skel) || attach_kretprobe_vfs_read(skel);
return attach_tp_sys_enter_read(skel) || attach_tp_sys_exit_read(skel);
}
int detach_kprobe_ksys_read(struct kit_bpf *skel){
int err = detach_link_generic(skel->links.kprobe_ksys_read);
int detach_tp_sys_enter_read(struct kit_bpf *skel){
int err = detach_link_generic(skel->links.tp_sys_enter_read);
if(err<0){
fprintf(stderr, "Failed to detach fs link\n");
return -1;
}
return 0;
}
int detach_kretprobe_vfs_read(struct kit_bpf *skel){
int err = detach_link_generic(skel->links.kretprobe_vfs_read);
int detach_tp_sys_exit_read(struct kit_bpf *skel){
int err = detach_link_generic(skel->links.tp_sys_exit_read);
if(err<0){
fprintf(stderr, "Failed to detach fs link\n");
return -1;
@@ -40,7 +40,7 @@ int detach_kretprobe_vfs_read(struct kit_bpf *skel){
}
int detach_fs_all(struct kit_bpf *skel){
return detach_kprobe_ksys_read(skel) || detach_kretprobe_vfs_read(skel);
return detach_tp_sys_enter_read(skel) || detach_tp_sys_exit_read(skel);
}
#endif