blob: 12c517b51ca251469383e183731ed7fd83c148b0 [file] [log] [blame]
Matt Helsley9f460802005-11-07 00:59:16 -08001/*
2 * cn_proc.h - process events connector
3 *
4 * Copyright (C) Matt Helsley, IBM Corp. 2005
5 * Based on cn_fork.h by Nguyen Anh Quynh and Guillaume Thouvenin
Matt Helsley9f460802005-11-07 00:59:16 -08006 * Copyright (C) 2005 Nguyen Anh Quynh <aquynh@gmail.com>
7 * Copyright (C) 2005 Guillaume Thouvenin <guillaume.thouvenin@bull.net>
8 *
Matt Helsley3fa21642006-06-23 02:05:44 -07009 * This program is free software; you can redistribute it and/or modify it
10 * under the terms of version 2.1 of the GNU Lesser General Public License
11 * as published by the Free Software Foundation.
Matt Helsley9f460802005-11-07 00:59:16 -080012 *
Matt Helsley3fa21642006-06-23 02:05:44 -070013 * This program is distributed in the hope that it would be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Matt Helsley9f460802005-11-07 00:59:16 -080016 */
17
18#ifndef CN_PROC_H
19#define CN_PROC_H
20
21#include <linux/types.h>
Matt Helsley9f460802005-11-07 00:59:16 -080022
23/*
24 * Userspace sends this enum to register with the kernel that it is listening
25 * for events on the connector.
26 */
27enum proc_cn_mcast_op {
28 PROC_CN_MCAST_LISTEN = 1,
29 PROC_CN_MCAST_IGNORE = 2
30};
31
32/*
33 * From the user's point of view, the process
34 * ID is the thread group ID and thread ID is the internal
35 * kernel "pid". So, fields are assigned as follow:
36 *
37 * In user space - In kernel space
38 *
39 * parent process ID = parent->tgid
40 * parent thread ID = parent->pid
41 * child process ID = child->tgid
42 * child thread ID = child->pid
43 */
44
45struct proc_event {
46 enum what {
47 /* Use successive bits so the enums can be used to record
48 * sets of events as well
49 */
50 PROC_EVENT_NONE = 0x00000000,
51 PROC_EVENT_FORK = 0x00000001,
52 PROC_EVENT_EXEC = 0x00000002,
53 PROC_EVENT_UID = 0x00000004,
54 PROC_EVENT_GID = 0x00000040,
Scott James Remnant02b51df2009-09-22 16:43:44 -070055 PROC_EVENT_SID = 0x00000080,
Vladimir Zapolskiyf701e5b2011-07-15 20:45:18 +030056 PROC_EVENT_PTRACE = 0x00000100,
Matt Helsley9f460802005-11-07 00:59:16 -080057 /* "next" should be 0x00000400 */
58 /* "last" is the last process event: exit */
59 PROC_EVENT_EXIT = 0x80000000
60 } what;
61 __u32 cpu;
Chandra Seetharaman822cfbff2006-07-30 03:03:04 -070062 __u64 __attribute__((aligned(8))) timestamp_ns;
63 /* Number of nano seconds since system boot */
Matt Helsley9f460802005-11-07 00:59:16 -080064 union { /* must be last field of proc_event struct */
65 struct {
66 __u32 err;
67 } ack;
68
69 struct fork_proc_event {
Arnd Bergmann85efde62009-02-26 00:51:39 +010070 __kernel_pid_t parent_pid;
71 __kernel_pid_t parent_tgid;
72 __kernel_pid_t child_pid;
73 __kernel_pid_t child_tgid;
Matt Helsley9f460802005-11-07 00:59:16 -080074 } fork;
75
76 struct exec_proc_event {
Arnd Bergmann85efde62009-02-26 00:51:39 +010077 __kernel_pid_t process_pid;
78 __kernel_pid_t process_tgid;
Matt Helsley9f460802005-11-07 00:59:16 -080079 } exec;
80
81 struct id_proc_event {
Arnd Bergmann85efde62009-02-26 00:51:39 +010082 __kernel_pid_t process_pid;
83 __kernel_pid_t process_tgid;
Matt Helsley9f460802005-11-07 00:59:16 -080084 union {
Matt Helsleydf69a602005-11-29 19:34:31 -080085 __u32 ruid; /* task uid */
86 __u32 rgid; /* task gid */
Matt Helsley9f460802005-11-07 00:59:16 -080087 } r;
88 union {
Matt Helsleydf69a602005-11-29 19:34:31 -080089 __u32 euid;
90 __u32 egid;
Matt Helsley9f460802005-11-07 00:59:16 -080091 } e;
92 } id;
93
Scott James Remnant02b51df2009-09-22 16:43:44 -070094 struct sid_proc_event {
95 __kernel_pid_t process_pid;
96 __kernel_pid_t process_tgid;
97 } sid;
98
Vladimir Zapolskiyf701e5b2011-07-15 20:45:18 +030099 struct ptrace_proc_event {
100 __kernel_pid_t process_pid;
101 __kernel_pid_t process_tgid;
102 __kernel_pid_t tracer_pid;
103 __kernel_pid_t tracer_tgid;
104 } ptrace;
105
Matt Helsley9f460802005-11-07 00:59:16 -0800106 struct exit_proc_event {
Arnd Bergmann85efde62009-02-26 00:51:39 +0100107 __kernel_pid_t process_pid;
108 __kernel_pid_t process_tgid;
Matt Helsley9f460802005-11-07 00:59:16 -0800109 __u32 exit_code, exit_signal;
110 } exit;
111 } event_data;
112};
113
114#ifdef __KERNEL__
115#ifdef CONFIG_PROC_EVENTS
116void proc_fork_connector(struct task_struct *task);
117void proc_exec_connector(struct task_struct *task);
118void proc_id_connector(struct task_struct *task, int which_id);
Scott James Remnant02b51df2009-09-22 16:43:44 -0700119void proc_sid_connector(struct task_struct *task);
Vladimir Zapolskiyf701e5b2011-07-15 20:45:18 +0300120void proc_ptrace_connector(struct task_struct *task, int which_id);
Matt Helsley9f460802005-11-07 00:59:16 -0800121void proc_exit_connector(struct task_struct *task);
122#else
123static inline void proc_fork_connector(struct task_struct *task)
124{}
125
126static inline void proc_exec_connector(struct task_struct *task)
127{}
128
129static inline void proc_id_connector(struct task_struct *task,
130 int which_id)
131{}
132
Scott James Remnant02b51df2009-09-22 16:43:44 -0700133static inline void proc_sid_connector(struct task_struct *task)
134{}
135
Vladimir Zapolskiyf701e5b2011-07-15 20:45:18 +0300136static inline void proc_ptrace_connector(struct task_struct *task,
137 int ptrace_id)
138{}
139
Matt Helsley9f460802005-11-07 00:59:16 -0800140static inline void proc_exit_connector(struct task_struct *task)
141{}
142#endif /* CONFIG_PROC_EVENTS */
143#endif /* __KERNEL__ */
144#endif /* CN_PROC_H */