fsnotify

command
v0.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 24, 2024 License: Apache-2.0 Imports: 10 Imported by: 0

README

In this example we process all btf files of the btfhub-archive repo to keep only the minimum amount of btf files required to capture all the possible variations, in terms of fetch arg field offsets, of the following three symbols fsnotify, __fsnotify_parent (can be also found as fsnotify_parent in some kernel versions), fsnotify_nameremove (exists only is some kernel versions). Also, all found btf files are going to get stripped, so they contain only the btf types required of the former three symbols.

Prepare btfhub-archive repo:
git clone https://github.com/aquasecurity/btfhub-archive.git
cd btfhub-archive
export BTFHUB_ARCHIVE_REPO=$PWD
find . -iname "*.btf.tar.xz"  -exec sh -c 'tar xvf {} -C $(dirname {})' \;
Run the fsnotify symbol offset extractor:
go run ./examples/fsnotify/main.go -repo ${BTFHUB_ARCHIVE_REPO}

Documentation

The Go Gopher

There is no documentation for this package.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL