Messages in this thread | | | Date | Mon, 16 Feb 2015 19:26:46 +0800 | From | He Kuang <> | Subject | Re: [PATCH v3 linux-trace 1/8] tracing: attach eBPF programs to tracepoints and syscalls |
| |
Hi, Alexei
Another suggestion on bpf syscall interface. Currently, BPF + syscalls/kprobes depends on CONFIG_BPF_SYSCALL. In kernel used on commercial products, CONFIG_BPF_SYSCALL is probably disabled, in this case, bpf bytecode cannot be loaded to the kernel.
If we turn the functionality of BPF_SYSCALL into a loadable module, then we can use it without any dependencies on the kernel. What about change bpf syscall to a /dev node or /sys file which can be exported by a kernel module?
| |