// SPDX-License-Identifier: GPL-2.0 // Copyright (c) 2020 Facebook #include #include #include struct task_struct { int tgid; } __attribute__((preserve_access_index)); struct { __uint(type, BPF_MAP_TYPE_ARRAY); __uint(max_entries, 1); __type(key, int); __type(value, int); } results SEC(".maps"); SEC("tp/raw_syscalls/sys_enter") int handle_sys_enter(void *ctx) { struct task_struct *task = (void *)bpf_get_current_task(); int tgid = BPF_CORE_READ(task, tgid); int zero = 0; bpf_map_update_elem(&results, &zero, &tgid, 0); return 0; } char _license[] SEC("license") = "GPL";