|
@@ -54,6 +54,7 @@ struct proc_event {
|
|
|
PROC_EVENT_GID = 0x00000040,
|
|
|
PROC_EVENT_SID = 0x00000080,
|
|
|
PROC_EVENT_PTRACE = 0x00000100,
|
|
|
+ PROC_EVENT_COMM = 0x00000200,
|
|
|
/* "next" should be 0x00000400 */
|
|
|
/* "last" is the last process event: exit */
|
|
|
PROC_EVENT_EXIT = 0x80000000
|
|
@@ -103,6 +104,12 @@ struct proc_event {
|
|
|
__kernel_pid_t tracer_tgid;
|
|
|
} ptrace;
|
|
|
|
|
|
+ struct comm_proc_event {
|
|
|
+ __kernel_pid_t process_pid;
|
|
|
+ __kernel_pid_t process_tgid;
|
|
|
+ char comm[16];
|
|
|
+ } comm;
|
|
|
+
|
|
|
struct exit_proc_event {
|
|
|
__kernel_pid_t process_pid;
|
|
|
__kernel_pid_t process_tgid;
|
|
@@ -118,6 +125,7 @@ void proc_exec_connector(struct task_struct *task);
|
|
|
void proc_id_connector(struct task_struct *task, int which_id);
|
|
|
void proc_sid_connector(struct task_struct *task);
|
|
|
void proc_ptrace_connector(struct task_struct *task, int which_id);
|
|
|
+void proc_comm_connector(struct task_struct *task);
|
|
|
void proc_exit_connector(struct task_struct *task);
|
|
|
#else
|
|
|
static inline void proc_fork_connector(struct task_struct *task)
|
|
@@ -133,6 +141,9 @@ static inline void proc_id_connector(struct task_struct *task,
|
|
|
static inline void proc_sid_connector(struct task_struct *task)
|
|
|
{}
|
|
|
|
|
|
+static inline void proc_comm_connector(struct task_struct *task)
|
|
|
+{}
|
|
|
+
|
|
|
static inline void proc_ptrace_connector(struct task_struct *task,
|
|
|
int ptrace_id)
|
|
|
{}
|