tetragon: Use syscall64 type in killer specs

Signed-off-by: Jiri Olsa <[email protected]>
cilium · Dec 4, 2023 · 013d152 · 013d152
1 parent 87a60d7
commit 013d152
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/examples/tracingpolicy/killer.yaml b/examples/tracingpolicy/killer.yaml
@@ -9,6 +9,7 @@ spec:
     values:
     - "sys_dup"
     - "sys_dup2"
+    - "__ia32_sys_dup"
   killers:
   - syscalls:
     - "list:dups"
@@ -17,7 +18,7 @@ spec:
     event: "sys_enter"
     args:
     - index: 4
-      type: "uint64"
+      type: "syscall64"
     selectors:
     - matchArgs:
       - index: 0

diff --git a/pkg/sensors/tracing/killer_test.go b/pkg/sensors/tracing/killer_test.go
@@ -79,7 +79,7 @@ spec:
     event: "sys_enter"
     args:
     - index: 4
-      type: "uint64"
+      type: "syscall64"
     selectors:
     - matchArgs:
       - index: 0
@@ -139,7 +139,7 @@ spec:
     event: "sys_enter"
     args:
     - index: 4
-      type: "uint64"
+      type: "syscall64"
     selectors:
     - matchArgs:
       - index: 0
@@ -204,7 +204,7 @@ spec:
     event: "sys_enter"
     args:
     - index: 4
-      type: "uint64"
+      type: "syscall64"
     selectors:
     - matchArgs:
       - index: 0