From 6beafe93853c8cfa890d7b62358b44a99163d1fe Mon Sep 17 00:00:00 2001 From: Sylvain Baubeau Date: Wed, 8 Dec 2021 23:41:10 +0100 Subject: [PATCH] Use best effort selector to attach SElinux kprobes (#10153) (cherry picked from commit 944017fecc7006e6163042015f6e66d03b00914e) --- pkg/security/ebpf/probes/event_types.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkg/security/ebpf/probes/event_types.go b/pkg/security/ebpf/probes/event_types.go index 40acc6f5593a44..cf5ec3bd0a27ab 100644 --- a/pkg/security/ebpf/probes/event_types.go +++ b/pkg/security/ebpf/probes/event_types.go @@ -232,13 +232,13 @@ var SelectorsPerEventType = map[eval.EventType][]manager.ProbesSelector{ &manager.BestEffort{Selectors: []manager.ProbesSelector{ &manager.ProbeSelector{ProbeIdentificationPair: manager.ProbeIdentificationPair{UID: SecurityAgentUID, EBPFSection: "kprobe/sel_write_disable", EBPFFuncName: "kprobe_sel_write_disable"}}, }}, - &manager.AllOf{Selectors: []manager.ProbesSelector{ + &manager.BestEffort{Selectors: []manager.ProbesSelector{ &manager.ProbeSelector{ProbeIdentificationPair: manager.ProbeIdentificationPair{UID: SecurityAgentUID, EBPFSection: "kprobe/sel_write_enforce", EBPFFuncName: "kprobe_sel_write_enforce"}}, }}, - &manager.AllOf{Selectors: []manager.ProbesSelector{ + &manager.BestEffort{Selectors: []manager.ProbesSelector{ &manager.ProbeSelector{ProbeIdentificationPair: manager.ProbeIdentificationPair{UID: SecurityAgentUID, EBPFSection: "kprobe/sel_write_bool", EBPFFuncName: "kprobe_sel_write_bool"}}, }}, - &manager.AllOf{Selectors: []manager.ProbesSelector{ + &manager.BestEffort{Selectors: []manager.ProbesSelector{ &manager.ProbeSelector{ProbeIdentificationPair: manager.ProbeIdentificationPair{UID: SecurityAgentUID, EBPFSection: "kprobe/sel_commit_bools_write", EBPFFuncName: "kprobe_sel_commit_bools_write"}}, }}, },