update(driver): update syscalls tables and driver report.

Signed-off-by: GitHub <[email protected]>
falcosecurity · Aug 27, 2024 · 8a79ab7 · 8a79ab7
1 parent 33cbe07
commit 8a79ab7
Show file tree

Hide file tree

Showing 7 changed files with 22 additions and 8 deletions.
diff --git a/docs/report.md b/docs/report.md
@@ -75,7 +75,7 @@
 | fsmount                 | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | fsopen                  | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | fspick                  | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
-| fstat                   | 🟢        | aarch64,ppc64le,riscv64,s390x,x86_64             |
+| fstat                   | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | fstatfs                 | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | fstatfs64               | 🟡        | ppc64le,s390x                                    |
 | fsync                   | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
@@ -201,7 +201,7 @@
 | munmap                  | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | name_to_handle_at       | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | nanosleep               | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
-| newfstatat              | 🟢        | aarch64,ppc64le,riscv64,s390x,x86_64             |
+| newfstatat              | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | nice                    | 🟡        | ppc64le,s390x                                    |
 | oldfstat                | 🟡        | ppc64le                                          |
 | oldlstat                | 🟡        | ppc64le                                          |
@@ -320,10 +320,10 @@
 | setns                   | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setpgid                 | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setpriority             | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
-| setregid                | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
+| setregid                | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setresgid               | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setresuid               | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
-| setreuid                | 🟡        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
+| setreuid                | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setrlimit               | 🟢        | aarch64,ppc64le,riscv64,s390x,x86_64             |
 | setsid                  | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | setsockopt              | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
@@ -396,6 +396,7 @@
 | unlink                  | 🟢        | ppc64le,s390x,x86_64                             |
 | unlinkat                | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | unshare                 | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
+| uretprobe               | 🟡        | x86_64                                           |
 | userfaultfd             | 🟢        | aarch64,loongarch64,ppc64le,riscv64,s390x,x86_64 |
 | ustat                   | 🟡        | ppc64le,s390x,x86_64                             |
 | utime                   | 🟡        | ppc64le,s390x,x86_64                             |

diff --git a/driver/SCHEMA_VERSION b/driver/SCHEMA_VERSION
@@ -1 +1 @@
-2.21.1
+2.21.2
diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h
@@ -1964,7 +1964,8 @@ enum extra_event_prog_code
 	PPM_SC_X(LSM_GET_SELF_ATTR, 439) \
 	PPM_SC_X(LSM_SET_SELF_ATTR, 440) \
 	PPM_SC_X(LSM_LIST_MODULES, 441) \
-	PPM_SC_X(MSEAL, 442)
+	PPM_SC_X(MSEAL, 442) \
+	PPM_SC_X(URETPROBE, 443)
 
 typedef enum {
 #define PPM_SC_X(name, value) PPM_SC_##name = (value),

diff --git a/driver/syscall_compat_loongarch64.h b/driver/syscall_compat_loongarch64.h
@@ -245,6 +245,12 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_readlinkat
 #define __NR_readlinkat 78
 #endif
+#ifndef __NR_newfstatat
+#define __NR_newfstatat 79
+#endif
+#ifndef __NR_fstat
+#define __NR_fstat 80
+#endif
 #ifndef __NR_sync
 #define __NR_sync 81
 #endif

diff --git a/driver/syscall_compat_x86_64.h b/driver/syscall_compat_x86_64.h
@@ -983,6 +983,9 @@ or GPL2.txt for full copies of the license.
 #ifndef __NR_rseq
 #define __NR_rseq 334
 #endif
+#ifndef __NR_uretprobe
+#define __NR_uretprobe 335
+#endif
 #ifndef __NR_pidfd_send_signal
 #define __NR_pidfd_send_signal 424
 #endif

diff --git a/driver/syscall_table.c b/driver/syscall_table.c
@@ -1015,4 +1015,7 @@ const struct syscall_evt_pair g_syscall_table[SYSCALL_TABLE_SIZE] = {
 #ifdef __NR_mseal
 	[__NR_mseal - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_MSEAL},
 #endif
+#ifdef __NR_uretprobe
+	[__NR_uretprobe - SYSCALL_TABLE_ID0] = {.ppm_sc = PPM_SC_URETPROBE},
+#endif
 };
diff --git a/userspace/libscap/linux/scap_ppm_sc.c b/userspace/libscap/linux/scap_ppm_sc.c