e402818776
Also fixes a couple of issues: - fix bpftrace creating BPF programs with truncated names, - fix CVE allowing unprivileged users loading of compromised linux headers. Resolves: RHEL-30779 Resolves: RHEL-8502 Resolves: RHEL-28765 CVE: CVE-2024-2313 Signed-off-by: Viktor Malik <vmalik@redhat.com>
67 lines
1.8 KiB
Diff
67 lines
1.8 KiB
Diff
From 8066a715dbd54e6cbfa66176544944a2df7952a6 Mon Sep 17 00:00:00 2001
|
|
From: Jerome Marchand <jmarchan@redhat.com>
|
|
Date: Thu, 11 Jun 2020 14:56:36 +0200
|
|
Subject: [PATCH] RHEL: aarch64: fixes statsnoop and opensnoop
|
|
|
|
On aarch64 the open syscall has been dropped. Only openat remains,
|
|
wich is called by libc open() function.
|
|
|
|
The state of *stat* syscalls, is a mess. They are several generations
|
|
of the system calls, and not all arches provides all of them. For
|
|
instance, new(l)stat are missing from aarch64.
|
|
|
|
The only way I can think of fixing thess is RHEL-8 only arch specific
|
|
patches.
|
|
|
|
Signed-off-by: Jerome Marchand <jmarchan@redhat.com>
|
|
---
|
|
tools/opensnoop.bt | 2 --
|
|
tools/statsnoop.bt | 8 ++------
|
|
2 files changed, 2 insertions(+), 8 deletions(-)
|
|
|
|
diff --git a/tools/opensnoop.bt b/tools/opensnoop.bt
|
|
index bbb26419..95185e5f 100755
|
|
--- a/tools/opensnoop.bt
|
|
+++ b/tools/opensnoop.bt
|
|
@@ -21,13 +21,11 @@ BEGIN
|
|
printf("%-6s %-16s %4s %3s %s\n", "PID", "COMM", "FD", "ERR", "PATH");
|
|
}
|
|
|
|
-tracepoint:syscalls:sys_enter_open,
|
|
tracepoint:syscalls:sys_enter_openat
|
|
{
|
|
@filename[tid] = args.filename;
|
|
}
|
|
|
|
-tracepoint:syscalls:sys_exit_open,
|
|
tracepoint:syscalls:sys_exit_openat
|
|
/@filename[tid]/
|
|
{
|
|
diff --git a/tools/statsnoop.bt b/tools/statsnoop.bt
|
|
index a76b2bcc..89c2c8ea 100755
|
|
--- a/tools/statsnoop.bt
|
|
+++ b/tools/statsnoop.bt
|
|
@@ -30,17 +30,13 @@ tracepoint:syscalls:sys_enter_statfs
|
|
@filename[tid] = args.pathname;
|
|
}
|
|
|
|
-tracepoint:syscalls:sys_enter_statx,
|
|
-tracepoint:syscalls:sys_enter_newstat,
|
|
-tracepoint:syscalls:sys_enter_newlstat
|
|
+tracepoint:syscalls:sys_enter_statx
|
|
{
|
|
@filename[tid] = args.filename;
|
|
}
|
|
|
|
tracepoint:syscalls:sys_exit_statfs,
|
|
-tracepoint:syscalls:sys_exit_statx,
|
|
-tracepoint:syscalls:sys_exit_newstat,
|
|
-tracepoint:syscalls:sys_exit_newlstat
|
|
+tracepoint:syscalls:sys_exit_statx
|
|
/@filename[tid]/
|
|
{
|
|
$ret = args.ret;
|
|
--
|
|
2.41.0
|
|
|