63 lines
1.7 KiB
C
63 lines
1.7 KiB
C
|
// SPDX-License-Identifier: GPL-2.0
|
||
|
|
/* Copyright (c) 2020 Facebook */
|
||
|
|
#include "bpf_iter.h"
|
||
|
|
#include <bpf/bpf_helpers.h>
|
||
|
|
|
||
|
|
char _license[] SEC("license") = "GPL";
|
||
|
|
|
||
|
|
/* Copied from mm.h */
|
||
|
|
#define VM_READ 0x00000001
|
||
|
|
#define VM_WRITE 0x00000002
|
||
|
|
#define VM_EXEC 0x00000004
|
||
|
|
#define VM_MAYSHARE 0x00000080
|
||
|
|
|
||
|
|
/* Copied from kdev_t.h */
|
||
|
|
#define MINORBITS 20
|
||
|
|
#define MINORMASK ((1U << MINORBITS) - 1)
|
||
|
|
#define MAJOR(dev) ((unsigned int) ((dev) >> MINORBITS))
|
||
|
|
#define MINOR(dev) ((unsigned int) ((dev) & MINORMASK))
|
||
|
|
|
||
|
|
#define D_PATH_BUF_SIZE 1024
|
||
|
|
char d_path_buf[D_PATH_BUF_SIZE] = {};
|
||
|
|
__u32 pid = 0;
|
||
|
|
__u32 one_task = 0;
|
||
|
|
__u32 one_task_error = 0;
|
||
|
|
|
||
|
|
SEC("iter/task_vma") int proc_maps(struct bpf_iter__task_vma *ctx)
|
||
|
|
{
|
||
|
|
struct vm_area_struct *vma = ctx->vma;
|
||
|
|
struct seq_file *seq = ctx->meta->seq;
|
||
|
|
struct task_struct *task = ctx->task;
|
||
|
|
struct file *file;
|
||
|
|
char perm_str[] = "----";
|
||
|
|
|
||
|
|
if (task == (void *)0 || vma == (void *)0)
|
||
|
|
return 0;
|
||
|
|
|
||
|
|
file = vma->vm_file;
|
||
|
|
if (task->tgid != pid) {
|
||
|
|
if (one_task)
|
||
|
|
one_task_error = 1;
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
perm_str[0] = (vma->vm_flags & VM_READ) ? 'r' : '-';
|
||
|
|
perm_str[1] = (vma->vm_flags & VM_WRITE) ? 'w' : '-';
|
||
|
|
perm_str[2] = (vma->vm_flags & VM_EXEC) ? 'x' : '-';
|
||
|
|
perm_str[3] = (vma->vm_flags & VM_MAYSHARE) ? 's' : 'p';
|
||
|
|
BPF_SEQ_PRINTF(seq, "%08llx-%08llx %s ", vma->vm_start, vma->vm_end, perm_str);
|
||
|
|
|
||
|
|
if (file) {
|
||
|
|
__u32 dev = file->f_inode->i_sb->s_dev;
|
||
|
|
|
||
|
|
bpf_d_path(&file->f_path, d_path_buf, D_PATH_BUF_SIZE);
|
||
|
|
|
||
|
|
BPF_SEQ_PRINTF(seq, "%08llx ", vma->vm_pgoff << 12);
|
||
|
|
BPF_SEQ_PRINTF(seq, "%02x:%02x %u", MAJOR(dev), MINOR(dev),
|
||
|
|
file->f_inode->i_ino);
|
||
|
|
BPF_SEQ_PRINTF(seq, "\t%s\n", d_path_buf);
|
||
|
|
} else {
|
||
|
|
BPF_SEQ_PRINTF(seq, "%08llx 00:00 0\n", 0ULL);
|
||
|
|
}
|
||
|
|
return 0;
|
||
|
|
}
|