mirror of
https://github.com/torvalds/linux.git
synced 2026-10-05 19:34:02 +02:00
3fa5aa398e
The tracepoint documentation claims that denial and lifecycle events
expose every input needed to reproduce a verdict. Instead document how
denial, ruleset, and domain events identify the denying policy, checked
operation and object, and reason for denial. Direct consumers to generic
tracepoints for additional operational context.
State the reconstruction limits: IDs are boot-local, rule checks have no
request ID, and exported records may be lost or cross-CPU reordered.
Also replace the incorrect BPF_RAW_TRACEPOINT guidance with libbpf
SEC("tp_btf/...") attachment and refer consumers to the event prototypes
for callback argument layouts.
Cc: Günther Noack <gnoack@google.com>
Cc: Steven Rostedt <rostedt@goodmis.org>
Link: https://patch.msgid.link/20260918185036.608651-10-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
|
||
|---|---|---|
| .. | ||
| coresight | ||
| postprocess | ||
| rv | ||
| boottime-trace.rst | ||
| debugging.rst | ||
| eprobetrace.rst | ||
| events-kmem.rst | ||
| events-landlock.rst | ||
| events-msr.rst | ||
| events-nmi.rst | ||
| events-pci-controller.rst | ||
| events-pci.rst | ||
| events-power.rst | ||
| events.rst | ||
| fprobe.rst | ||
| fprobetrace.rst | ||
| ftrace-design.rst | ||
| ftrace-uses.rst | ||
| ftrace.rst | ||
| function-graph-fold.vim | ||
| hisi-ptt.rst | ||
| histogram-design.rst | ||
| histogram.rst | ||
| hwlat_detector.rst | ||
| index.rst | ||
| intel_th.rst | ||
| kprobes.rst | ||
| kprobetrace.rst | ||
| mmiotrace.rst | ||
| osnoise-tracer.rst | ||
| remotes.rst | ||
| ring-buffer-design.rst | ||
| ring-buffer-map.rst | ||
| stm.rst | ||
| sys-t.rst | ||
| timerlat-tracer.rst | ||
| tracepoint-analysis.rst | ||
| tracepoints.rst | ||
| uprobetracer.rst | ||
| user_events.rst | ||