forked from Qortal/Brooklyn
41 lines
945 B
Plaintext
41 lines
945 B
Plaintext
|
#!/bin/sh
|
||
|
|
# SPDX-License-Identifier: GPL-2.0
|
||
|
|
# description: Generic dynamic event - add/remove eprobe events
|
||
|
|
# requires: dynamic_events events/syscalls/sys_enter_openat "e[:[<group>/]<event>] <attached-group>.<attached-event> [<args>]":README
|
||
|
|
|
||
|
|
echo 0 > events/enable
|
||
|
|
|
||
|
|
clear_dynamic_events
|
||
|
|
|
||
|
|
SYSTEM="syscalls"
|
||
|
|
EVENT="sys_enter_openat"
|
||
|
|
FIELD="filename"
|
||
|
|
EPROBE="eprobe_open"
|
||
|
|
|
||
|
|
echo "e:$EPROBE $SYSTEM/$EVENT file=+0(\$filename):ustring" >> dynamic_events
|
||
|
|
|
||
|
|
grep -q "$EPROBE" dynamic_events
|
||
|
|
test -d events/eprobes/$EPROBE
|
||
|
|
|
||
|
|
echo 1 > events/eprobes/$EPROBE/enable
|
||
|
|
ls
|
||
|
|
echo 0 > events/eprobes/$EPROBE/enable
|
||
|
|
|
||
|
|
content=`grep '^ *ls-' trace | grep 'file='`
|
||
|
|
nocontent=`grep '^ *ls-' trace | grep 'file=' | grep -v -e '"/' -e '"."' -e '(fault)' ` || true
|
||
|
|
|
||
|
|
if [ -z "$content" ]; then
|
||
|
|
exit_fail
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ ! -z "$nocontent" ]; then
|
||
|
|
exit_fail
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "-:$EPROBE" >> dynamic_events
|
||
|
|
|
||
|
|
! grep -q "$EPROBE" dynamic_events
|
||
|
|
! test -d events/eprobes/$EPROBE
|
||
|
|
|
||
|
|
clear_trace
|