Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Missing global symbols in BPF programs #1505

Closed
AlonZivony opened this issue Feb 23, 2022 · 0 comments · Fixed by #1508
Closed

Missing global symbols in BPF programs #1505

AlonZivony opened this issue Feb 23, 2022 · 0 comments · Fixed by #1508
Assignees
@AlonZivony
Labels
area/ebpf

Comments

@AlonZivony
Copy link
Contributor

Some global symbols are useful in BPF programs to enable access to kernel data and for understanding kernel build.
For example some functions existence mark that the kernel was built with some kconfig enabled, and there are structures in the kernel to save offsets of data and addresses.
This is a CO-RE issue because in non CO-RE the globals are available to use.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@AlonZivony AlonZivony

Labels
area/ebpf
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Load kallsyms values AlonZivony/tracee
1 participant
@AlonZivony