bcc/tools: Replace bpf_probe_read with bpf_probe_read_kernel
It is recommended to use bpf_probe_read_kernel_{str} in the bpf tools.
See kernel commit 0ebeea8ca8a4 ("bpf: Restrict bpf_probe_read{, str}()
only to archs where they work")
Signed-off-by: Sumanth Korikkar <sumanthk@linux.ibm.com>
Acked-by: Ilya Leoshkevich <iii@linux.ibm.com>
diff --git a/tools/opensnoop.py b/tools/opensnoop.py
index a68b13f..dffb021 100755
--- a/tools/opensnoop.py
+++ b/tools/opensnoop.py
@@ -151,7 +151,7 @@
// missed entry
return 0;
}
- bpf_probe_read(&data.comm, sizeof(data.comm), valp->comm);
+ bpf_probe_read_kernel(&data.comm, sizeof(data.comm), valp->comm);
bpf_probe_read_user(&data.fname, sizeof(data.fname), (void *)valp->fname);
data.id = valp->id;
data.ts = tsp / 1000;