We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a8e7a42 commit 0d026c5Copy full SHA for 0d026c5
examples/execve.py
@@ -1,9 +1,11 @@
1
-from pythonbpf.decorators import tracepoint
+from pythonbpf.decorators import tracepoint, syscalls
2
from ctypes import c_void_p, c_int32
3
4
-@tracepoint("syscalls:sys_enter_execve")
+
5
+@tracepoint(syscalls.sys_enter_execve)
6
def trace_execve(ctx: c_void_p) -> c_int32:
- print("execve called\n")
7
+ print("execve called")
8
return c_int32(0)
9
10
11
LICENSE = "GPL"
pythonbpf/decorators.py
@@ -1,3 +1,11 @@
+from types import SimpleNamespace
+syscalls = SimpleNamespace(
+ sys_enter_execve="syscalls:sys_enter_execve",
+ sys_exit_execve="syscalls:sys_exit_execve",
+)
def tracepoint(name: str):
def wrapper(fn):
fn._section = f"tracepoint/{name}"
0 commit comments