magic_write: Missing complicated definitions values in BPF programs #2653
Replies: 2 comments
-
I am wondering how to implement this one. My solution was to create a map between const key to its value. WDYT @rafaeldtinoco? |
Beta Was this translation helpful? Give feedback.
-
This is more of implementation discussion than an issue in tracee. |
Beta Was this translation helpful? Give feedback.
-
In CO-RE there is no access to definitions in the kernel, so we need to calculate them ourselves.
Currently we created the
missing_definitions.h
file to define mandatory definitions.However, this won't work for definitions which depends on kconfig values, or which are translated to globals which we don't have access to either in CO-RE.
There should be a way to calculate these complicated values for the BPF programs to use.
Beta Was this translation helpful? Give feedback.
All reactions