update(driver): update syscalls tables and driver report.

Signed-off-by: GitHub <noreply@github.com>
falcosecurity · Aug 1, 2023 · f72fe25 · f72fe25
1 parent 1b204a4
commit f72fe25
Show file tree

Hide file tree

Showing 7 changed files with 17 additions and 3 deletions.
diff --git a/docs/report.md b/docs/report.md
@@ -13,6 +13,7 @@
 | bind                    | 🟢        |
 | bpf                     | 🟢        |
 | brk                     | 🟢        |
+| cachestat               | 🟡        |
 | capget                  | 🟡        |
 | capset                  | 🟢        |
 | chdir                   | 🟢        |

diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h
@@ -1833,7 +1833,8 @@ enum extra_event_prog_code
 	PPM_SC_X(IDLE, 408) \
 	PPM_SC_X(S390_RUNTIME_INSTR, 409) \
 	PPM_SC_X(SIGRETURN, 410) \
-	PPM_SC_X(S390_GUARDED_STORAGE, 411)
+	PPM_SC_X(S390_GUARDED_STORAGE, 411) \
+	PPM_SC_X(CACHESTAT, 412)
 
 typedef enum {
 #define PPM_SC_X(name, value) PPM_SC_##name = (value),

diff --git a/driver/syscall_compat_aarch64.h b/driver/syscall_compat_aarch64.h
@@ -917,3 +917,6 @@
 #ifndef __NR_set_mempolicy_home_node
 #define __NR_set_mempolicy_home_node 450
 #endif
+#ifndef __NR_cachestat
+#define __NR_cachestat 451
+#endif
diff --git a/driver/syscall_compat_s390x.h b/driver/syscall_compat_s390x.h
@@ -1100,3 +1100,6 @@
 #ifndef __NR_set_mempolicy_home_node
 #define __NR_set_mempolicy_home_node 450
 #endif
+#ifndef __NR_cachestat
+#define __NR_cachestat 451
+#endif
diff --git a/driver/syscall_compat_x86_64.h b/driver/syscall_compat_x86_64.h
@@ -1070,3 +1070,6 @@
 #ifndef __NR_set_mempolicy_home_node
 #define __NR_set_mempolicy_home_node 450
 #endif
+#ifndef __NR_cachestat
+#define __NR_cachestat 451
+#endif
diff --git a/driver/syscall_table.c b/driver/syscall_table.c
@@ -908,4 +908,7 @@ const struct syscall_evt_pair g_syscall_table[SYSCALL_TABLE_SIZE] = {
 #ifdef __NR_sigsuspend
 	[__NR_sigsuspend - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_SIGSUSPEND},
 #endif
+#ifdef __NR_cachestat
+	[__NR_cachestat - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_CACHESTAT},
+#endif
 };
diff --git a/userspace/libscap/linux/scap_ppm_sc.c b/userspace/libscap/linux/scap_ppm_sc.c