mirror of
https://github.com/springzfx/cgproxy.git
synced 2026-01-07 13:07:56 +08:00
217 lines
8.3 KiB
C
217 lines
8.3 KiB
C
/* SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause) */
|
|
|
|
/* THIS FILE IS AUTOGENERATED! */
|
|
#ifndef __EXECSNOOP_KERN_SKEL_H__
|
|
#define __EXECSNOOP_KERN_SKEL_H__
|
|
|
|
#include <stdlib.h>
|
|
#include <bpf/libbpf.h>
|
|
|
|
struct execsnoop_kern {
|
|
struct bpf_object_skeleton *skeleton;
|
|
struct bpf_object *obj;
|
|
struct {
|
|
struct bpf_map *perf_events;
|
|
struct bpf_map *records;
|
|
} maps;
|
|
struct {
|
|
struct bpf_program *syscall_enter_execve;
|
|
struct bpf_program *syscall_exit_execve;
|
|
} progs;
|
|
struct {
|
|
struct bpf_link *syscall_enter_execve;
|
|
struct bpf_link *syscall_exit_execve;
|
|
} links;
|
|
};
|
|
|
|
static void
|
|
execsnoop_kern__destroy(struct execsnoop_kern *obj)
|
|
{
|
|
if (!obj)
|
|
return;
|
|
if (obj->skeleton)
|
|
bpf_object__destroy_skeleton(obj->skeleton);
|
|
free(obj);
|
|
}
|
|
|
|
static inline int
|
|
execsnoop_kern__create_skeleton(struct execsnoop_kern *obj);
|
|
|
|
static inline struct execsnoop_kern *
|
|
execsnoop_kern__open_opts(const struct bpf_object_open_opts *opts)
|
|
{
|
|
struct execsnoop_kern *obj;
|
|
|
|
obj = (typeof(obj))calloc(1, sizeof(*obj));
|
|
if (!obj)
|
|
return NULL;
|
|
if (execsnoop_kern__create_skeleton(obj))
|
|
goto err;
|
|
if (bpf_object__open_skeleton(obj->skeleton, opts))
|
|
goto err;
|
|
|
|
return obj;
|
|
err:
|
|
execsnoop_kern__destroy(obj);
|
|
return NULL;
|
|
}
|
|
|
|
static inline struct execsnoop_kern *
|
|
execsnoop_kern__open(void)
|
|
{
|
|
return execsnoop_kern__open_opts(NULL);
|
|
}
|
|
|
|
static inline int
|
|
execsnoop_kern__load(struct execsnoop_kern *obj)
|
|
{
|
|
return bpf_object__load_skeleton(obj->skeleton);
|
|
}
|
|
|
|
static inline struct execsnoop_kern *
|
|
execsnoop_kern__open_and_load(void)
|
|
{
|
|
struct execsnoop_kern *obj;
|
|
|
|
obj = execsnoop_kern__open();
|
|
if (!obj)
|
|
return NULL;
|
|
if (execsnoop_kern__load(obj)) {
|
|
execsnoop_kern__destroy(obj);
|
|
return NULL;
|
|
}
|
|
return obj;
|
|
}
|
|
|
|
static inline int
|
|
execsnoop_kern__attach(struct execsnoop_kern *obj)
|
|
{
|
|
return bpf_object__attach_skeleton(obj->skeleton);
|
|
}
|
|
|
|
static inline void
|
|
execsnoop_kern__detach(struct execsnoop_kern *obj)
|
|
{
|
|
return bpf_object__detach_skeleton(obj->skeleton);
|
|
}
|
|
|
|
static inline int
|
|
execsnoop_kern__create_skeleton(struct execsnoop_kern *obj)
|
|
{
|
|
struct bpf_object_skeleton *s;
|
|
|
|
s = (typeof(s))calloc(1, sizeof(*s));
|
|
if (!s)
|
|
return -1;
|
|
obj->skeleton = s;
|
|
|
|
s->sz = sizeof(*s);
|
|
s->name = "execsnoop_kern";
|
|
s->obj = &obj->obj;
|
|
|
|
/* maps */
|
|
s->map_cnt = 2;
|
|
s->map_skel_sz = sizeof(*s->maps);
|
|
s->maps = (typeof(s->maps))calloc(s->map_cnt, s->map_skel_sz);
|
|
if (!s->maps)
|
|
goto err;
|
|
|
|
s->maps[0].name = "perf_events";
|
|
s->maps[0].map = &obj->maps.perf_events;
|
|
|
|
s->maps[1].name = "records";
|
|
s->maps[1].map = &obj->maps.records;
|
|
|
|
/* programs */
|
|
s->prog_cnt = 2;
|
|
s->prog_skel_sz = sizeof(*s->progs);
|
|
s->progs = (typeof(s->progs))calloc(s->prog_cnt, s->prog_skel_sz);
|
|
if (!s->progs)
|
|
goto err;
|
|
|
|
s->progs[0].name = "syscall_enter_execve";
|
|
s->progs[0].prog = &obj->progs.syscall_enter_execve;
|
|
s->progs[0].link = &obj->links.syscall_enter_execve;
|
|
|
|
s->progs[1].name = "syscall_exit_execve";
|
|
s->progs[1].prog = &obj->progs.syscall_exit_execve;
|
|
s->progs[1].link = &obj->links.syscall_exit_execve;
|
|
|
|
s->data_sz = 2024;
|
|
s->data = (void *)"\
|
|
\x7f\x45\x4c\x46\x02\x01\x01\0\0\0\0\0\0\0\0\0\x01\0\xf7\0\x01\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\x28\x05\0\0\0\0\0\0\0\0\0\0\x40\0\0\0\0\0\x40\0\x0b\0\
|
|
\x01\0\x85\0\0\0\x0e\0\0\0\xbf\x06\0\0\0\0\0\0\x63\x6a\xfc\xff\0\0\0\0\x85\0\0\
|
|
\0\x0f\0\0\0\xbf\x07\0\0\0\0\0\0\xb7\x01\0\0\0\0\0\0\x7b\x1a\xe8\xff\0\0\0\0\
|
|
\x7b\x1a\xe0\xff\0\0\0\0\x7b\x1a\xd8\xff\0\0\0\0\x7b\x1a\xd0\xff\0\0\0\0\xbf\
|
|
\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\xbf\xa3\0\0\0\0\0\0\x07\x03\0\0\
|
|
\xd0\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xb7\x04\0\0\x01\0\0\0\x85\
|
|
\0\0\0\x02\0\0\0\x67\0\0\0\x20\0\0\0\x77\0\0\0\x20\0\0\0\x55\0\x19\0\0\0\0\0\
|
|
\xbf\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\x85\0\0\0\x01\0\0\0\xbf\x08\0\0\0\0\0\0\x15\x08\x12\0\0\0\0\0\x77\x06\0\
|
|
\0\x20\0\0\0\x61\xa1\xfc\xff\0\0\0\0\x63\x78\x1c\0\0\0\0\0\x63\x68\x14\0\0\0\0\
|
|
\0\x63\x18\x10\0\0\0\0\0\x85\0\0\0\x23\0\0\0\x07\0\0\0\x78\x04\0\0\xbf\xa1\0\0\
|
|
\0\0\0\0\x07\x01\0\0\xf0\xff\xff\xff\xb7\x02\0\0\x08\0\0\0\xbf\x03\0\0\0\0\0\0\
|
|
\x85\0\0\0\x04\0\0\0\x07\x08\0\0\x18\0\0\0\x79\xa3\xf0\xff\0\0\0\0\x07\x03\0\0\
|
|
\x6c\x04\0\0\xbf\x81\0\0\0\0\0\0\xb7\x02\0\0\x04\0\0\0\x85\0\0\0\x04\0\0\0\xb7\
|
|
\0\0\0\0\0\0\0\x95\0\0\0\0\0\0\0\xbf\x16\0\0\0\0\0\0\x85\0\0\0\x0e\0\0\0\x63\
|
|
\x0a\xfc\xff\0\0\0\0\xbf\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\0\0\x85\0\0\0\x01\0\0\0\xbf\x07\0\0\0\0\0\0\x15\x07\x13\
|
|
\0\0\0\0\0\x79\x61\x10\0\0\0\0\0\xb7\x02\0\0\0\0\0\0\x6d\x12\x0b\0\0\0\0\0\xbf\
|
|
\x71\0\0\0\0\0\0\xb7\x02\0\0\x10\0\0\0\x85\0\0\0\x10\0\0\0\xbf\x61\0\0\0\0\0\0\
|
|
\x18\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x18\x03\0\0\xff\xff\xff\xff\0\0\0\0\0\0\0\
|
|
\0\xbf\x74\0\0\0\0\0\0\xb7\x05\0\0\x20\0\0\0\x85\0\0\0\x19\0\0\0\xbf\xa2\0\0\0\
|
|
\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x85\0\0\
|
|
\0\x03\0\0\0\xb7\0\0\0\0\0\0\0\x95\0\0\0\0\0\0\0\x01\0\0\0\x04\0\0\0\x20\0\0\0\
|
|
\0\x28\0\0\0\0\0\0\x04\0\0\0\x04\0\0\0\x04\0\0\0\x80\0\0\0\0\0\0\0\x47\x50\x4c\
|
|
\0\x06\x07\x05\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xac\0\0\0\x04\
|
|
\0\xf1\xff\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xdb\0\0\0\0\0\x03\0\x70\x01\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\xd4\0\0\0\0\0\x05\0\xc0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xcd\
|
|
\0\0\0\0\0\x05\0\xe8\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xa3\0\0\0\x11\0\x08\0\0\0\0\
|
|
\0\0\0\0\0\x04\0\0\0\0\0\0\0\x20\0\0\0\x11\0\x09\0\0\0\0\0\0\0\0\0\x04\0\0\0\0\
|
|
\0\0\0\x07\0\0\0\x11\0\x07\0\x14\0\0\0\0\0\0\0\x14\0\0\0\0\0\0\0\x18\0\0\0\x11\
|
|
\0\x07\0\0\0\0\0\0\0\0\0\x14\0\0\0\0\0\0\0\x8e\0\0\0\x12\0\x03\0\0\0\0\0\0\0\0\
|
|
\0\x80\x01\0\0\0\0\0\0\x51\0\0\0\x12\0\x05\0\0\0\0\0\0\0\0\0\xf8\0\0\0\0\0\0\0\
|
|
\x70\0\0\0\0\0\0\0\x01\0\0\0\x08\0\0\0\xb8\0\0\0\0\0\0\0\x01\0\0\0\x08\0\0\0\
|
|
\x28\0\0\0\0\0\0\0\x01\0\0\0\x08\0\0\0\x88\0\0\0\0\0\0\0\x01\0\0\0\x07\0\0\0\
|
|
\xd0\0\0\0\0\0\0\0\x01\0\0\0\x08\0\0\0\0\x2e\x74\x65\x78\x74\0\x70\x65\x72\x66\
|
|
\x5f\x65\x76\x65\x6e\x74\x73\0\x6d\x61\x70\x73\0\x72\x65\x63\x6f\x72\x64\x73\0\
|
|
\x5f\x76\x65\x72\x73\x69\x6f\x6e\0\x2e\x72\x65\x6c\x74\x72\x61\x63\x65\x70\x6f\
|
|
\x69\x6e\x74\x2f\x73\x79\x73\x63\x61\x6c\x6c\x73\x2f\x73\x79\x73\x5f\x65\x78\
|
|
\x69\x74\x5f\x65\x78\x65\x63\x76\x65\0\x73\x79\x73\x63\x61\x6c\x6c\x5f\x65\x78\
|
|
\x69\x74\x5f\x65\x78\x65\x63\x76\x65\0\x2e\x72\x65\x6c\x74\x72\x61\x63\x65\x70\
|
|
\x6f\x69\x6e\x74\x2f\x73\x79\x73\x63\x61\x6c\x6c\x73\x2f\x73\x79\x73\x5f\x65\
|
|
\x6e\x74\x65\x72\x5f\x65\x78\x65\x63\x76\x65\0\x73\x79\x73\x63\x61\x6c\x6c\x5f\
|
|
\x65\x6e\x74\x65\x72\x5f\x65\x78\x65\x63\x76\x65\0\x5f\x6c\x69\x63\x65\x6e\x73\
|
|
\x65\0\x65\x78\x65\x63\x73\x6e\x6f\x6f\x70\x5f\x6b\x65\x72\x6e\x2e\x63\0\x2e\
|
|
\x73\x74\x72\x74\x61\x62\0\x2e\x73\x79\x6d\x74\x61\x62\0\x4c\x42\x42\x31\x5f\
|
|
\x34\0\x4c\x42\x42\x31\x5f\x33\0\x4c\x42\x42\x30\x5f\x33\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xbd\0\0\0\x03\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\x40\x04\0\0\0\0\0\0\xe2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\x01\0\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\x40\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x04\0\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\x69\0\0\0\x01\0\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x40\0\0\0\0\0\0\
|
|
\0\x80\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x65\0\
|
|
\0\0\x09\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xf0\x03\0\0\0\0\0\0\x20\0\0\0\0\
|
|
\0\0\0\x0a\0\0\0\x03\0\0\0\x08\0\0\0\0\0\0\0\x10\0\0\0\0\0\0\0\x2d\0\0\0\x01\0\
|
|
\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xc0\x01\0\0\0\0\0\0\xf8\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x29\0\0\0\x09\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\x10\x04\0\0\0\0\0\0\x30\0\0\0\0\0\0\0\x0a\0\0\0\x05\0\0\
|
|
\0\x08\0\0\0\0\0\0\0\x10\0\0\0\0\0\0\0\x13\0\0\0\x01\0\0\0\x03\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\0\0\xb8\x02\0\0\0\0\0\0\x28\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x04\0\0\0\
|
|
\0\0\0\0\0\0\0\0\0\0\0\0\xa4\0\0\0\x01\0\0\0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
|
|
\xe0\x02\0\0\0\0\0\0\x04\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\
|
|
\0\0\0\0\0\x21\0\0\0\x01\0\0\0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xe4\x02\0\0\0\
|
|
\0\0\0\x04\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x04\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xc5\
|
|
\0\0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xe8\x02\0\0\0\0\0\0\x08\x01\0\
|
|
\0\0\0\0\0\x01\0\0\0\x05\0\0\0\x08\0\0\0\0\0\0\0\x18\0\0\0\0\0\0\0";
|
|
|
|
return 0;
|
|
err:
|
|
bpf_object__destroy_skeleton(s);
|
|
return -1;
|
|
}
|
|
|
|
#endif /* __EXECSNOOP_KERN_SKEL_H__ */
|