update(driver): update syscalls tables and driver report.

Signed-off-by: GitHub <noreply@github.com>
falcosecurity · Jun 3, 2024 · 58bf3a9 · 58bf3a9
1 parent 40c0792
commit 58bf3a9
Show file tree

Hide file tree

Showing 12 changed files with 439 additions and 415 deletions.
diff --git a/docs/report.md b/docs/report.md
diff --git a/driver/SCHEMA_VERSION b/driver/SCHEMA_VERSION
@@ -1 +1 @@
-2.20.1
+2.20.2
diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h
@@ -1960,7 +1960,8 @@ enum extra_event_prog_code
 	PPM_SC_X(STATMOUNT, 438) \
 	PPM_SC_X(LSM_GET_SELF_ATTR, 439) \
 	PPM_SC_X(LSM_SET_SELF_ATTR, 440) \
-	PPM_SC_X(LSM_LIST_MODULES, 441)
+	PPM_SC_X(LSM_LIST_MODULES, 441) \
+	PPM_SC_X(MSEAL, 442)
 
 typedef enum {
 #define PPM_SC_X(name, value) PPM_SC_##name = (value),

diff --git a/driver/syscall_compat_aarch64.h b/driver/syscall_compat_aarch64.h
@@ -962,3 +962,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_compat_loongarch64.h b/driver/syscall_compat_loongarch64.h
@@ -944,3 +944,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_compat_ppc64le.h b/driver/syscall_compat_ppc64le.h
@@ -1193,3 +1193,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_compat_riscv64.h b/driver/syscall_compat_riscv64.h
@@ -965,3 +965,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_compat_s390x.h b/driver/syscall_compat_s390x.h
@@ -1121,3 +1121,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_compat_x86_64.h b/driver/syscall_compat_x86_64.h
@@ -1097,3 +1097,6 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_lsm_list_modules
 #define __NR_lsm_list_modules 461
 #endif
+#ifndef __NR_mseal
+#define __NR_mseal 462
+#endif
diff --git a/driver/syscall_ia32_64_map.c b/driver/syscall_ia32_64_map.c
@@ -453,4 +453,5 @@ const int g_ia32_64_map[SYSCALL_TABLE_SIZE] = {
 	[459] = 459,
 	[460] = 460,
 	[461] = 461,
+	[462] = 462,
 };
diff --git a/driver/syscall_table.c b/driver/syscall_table.c
@@ -1009,4 +1009,7 @@ const struct syscall_evt_pair g_syscall_table[SYSCALL_TABLE_SIZE] = {
 #ifdef __NR_listmount
 	[__NR_listmount - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_LISTMOUNT},
 #endif
+#ifdef __NR_mseal
+	[__NR_mseal - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_MSEAL},
+#endif
 };
diff --git a/userspace/libscap/linux/scap_ppm_sc.c b/userspace/libscap/linux/scap_ppm_sc.c