Skip to content

Commit

Permalink
fix(event): enable ksymbols engine for PrintMemDump (#3443)
Browse files Browse the repository at this point in the history
Commit 1a47a4e attempted to fix this issue by reverting some changes
made during the event definitions (and dependencies) refactor. That
change caused some regressions because of another fix made together,
but, since it was reverted, this commit fixes the same issue with a much
simpler approach (at least until the event definitions refactor work is
finished).

Fixes: #3382
  • Loading branch information
rafaeldtinoco authored Sep 6, 2023
1 parent ddb83af commit c1c053a
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion pkg/events/core.go
Original file line number Diff line number Diff line change
Expand Up @@ -10344,7 +10344,13 @@ var CoreEvents = map[ID]Definition{
ids: []ID{
DoInitModule,
},
kSymbols: []KSymbol{},
kSymbols: []KSymbol{
// Special case for this event: Single symbol, common to all kernel versions. Placed
// here so the ksymbols engine is always enabled, during tracee startup. The symbols
// are resolved dynamically, during runtime depending on the arguments passed to
// the event.
{symbol: "_stext", required: true},
},
capabilities: Capabilities{
base: []cap.Value{
cap.SYSLOG, // read /proc/kallsyms
Expand Down

0 comments on commit c1c053a

Please sign in to comment.