bpftrace/bpftrace-0.21.1-RHEL-aarch64-fixes-statsnoop-and-opensnoop.patch

From cae27a1842c038bb59fb8e3ee48018d0e69f2a3c Mon Sep 17 00:00:00 2001
From: Jerome Marchand <jmarchan@redhat.com>
Date: Thu, 11 Jun 2020 14:56:36 +0200
Subject: [PATCH] RHEL: aarch64: fixes statsnoop and opensnoop

On aarch64 the open syscall has been dropped. Only openat remains,
wich is called by libc open() function.

The state of *stat* syscalls, is a mess. They are several generations
of the system calls, and not all arches provides all of them. For
instance, new(l)stat are missing from aarch64.

The only way I can think of fixing thess is RHEL-8 only arch specific
patches.

Signed-off-by: Jerome Marchand <jmarchan@redhat.com>
---
 tools/opensnoop.bt | 2 --
 tools/statsnoop.bt | 8 ++------
 2 files changed, 2 insertions(+), 8 deletions(-)

diff --git a/tools/opensnoop.bt b/tools/opensnoop.bt
index bbb26419..95185e5f 100755
--- a/tools/opensnoop.bt
+++ b/tools/opensnoop.bt
@@ -21,13 +21,11 @@ BEGIN
 	printf("%-6s %-16s %4s %3s %s\n", "PID", "COMM", "FD", "ERR", "PATH");
 }
 
-tracepoint:syscalls:sys_enter_open,
 tracepoint:syscalls:sys_enter_openat
 {
 	@filename[tid] = args.filename;
 }
 
-tracepoint:syscalls:sys_exit_open,
 tracepoint:syscalls:sys_exit_openat
 /@filename[tid]/
 {
diff --git a/tools/statsnoop.bt b/tools/statsnoop.bt
index a76b2bcc..89c2c8ea 100755
--- a/tools/statsnoop.bt
+++ b/tools/statsnoop.bt
@@ -30,17 +30,13 @@ tracepoint:syscalls:sys_enter_statfs
 	@filename[tid] = args.pathname;
 }
 
-tracepoint:syscalls:sys_enter_statx,
-tracepoint:syscalls:sys_enter_newstat,
-tracepoint:syscalls:sys_enter_newlstat
+tracepoint:syscalls:sys_enter_statx
 {
 	@filename[tid] = args.filename;
 }
 
 tracepoint:syscalls:sys_exit_statfs,
-tracepoint:syscalls:sys_exit_statx,
-tracepoint:syscalls:sys_exit_newstat,
-tracepoint:syscalls:sys_exit_newlstat
+tracepoint:syscalls:sys_exit_statx
 /@filename[tid]/
 {
 	$ret = args.ret;
-- 
2.45.0