github.com/castai/kvisor@v1.7.1-0.20240516114728-b3572a2607b5/pkg/ebpftracer/events/events_amd64.go (about) 1 //go:build amd64 2 // +build amd64 3 4 package events 5 6 // x86 64bit syscall numbers (used as event IDs for the Syscall Events) 7 // https://github.com/torvalds/linux/blob/master/arch/x86/entry/syscalls/syscall_64.tbl 8 9 const ( 10 Read ID = 0 11 Write ID = 1 12 Open ID = 2 13 Close ID = 3 14 Stat ID = 4 15 Fstat ID = 5 16 Lstat ID = 6 17 Poll ID = 7 18 Lseek ID = 8 19 Mmap ID = 9 20 Mprotect ID = 10 21 Munmap ID = 11 22 Brk ID = 12 23 RtSigaction ID = 13 24 RtSigprocmask ID = 14 25 RtSigreturn ID = 15 26 Ioctl ID = 16 27 Pread64 ID = 17 28 Pwrite64 ID = 18 29 Readv ID = 19 30 Writev ID = 20 31 Access ID = 21 32 Pipe ID = 22 33 Select ID = 23 34 SchedYield ID = 24 35 Mremap ID = 25 36 Msync ID = 26 37 Mincore ID = 27 38 Madvise ID = 28 39 Shmget ID = 29 40 Shmat ID = 30 41 Shmctl ID = 31 42 Dup ID = 32 43 Dup2 ID = 33 44 Pause ID = 34 45 Nanosleep ID = 35 46 Getitimer ID = 36 47 Alarm ID = 37 48 Setitimer ID = 38 49 Getpid ID = 39 50 Sendfile ID = 40 51 Socket ID = 41 52 Connect ID = 42 53 Accept ID = 43 54 Sendto ID = 44 55 Recvfrom ID = 45 56 Sendmsg ID = 46 57 Recvmsg ID = 47 58 Shutdown ID = 48 59 Bind ID = 49 60 Listen ID = 50 61 Getsockname ID = 51 62 Getpeername ID = 52 63 Socketpair ID = 53 64 Setsockopt ID = 54 65 Getsockopt ID = 55 66 Clone ID = 56 67 Fork ID = 57 68 Vfork ID = 58 69 Execve ID = 59 70 Exit ID = 60 71 Wait4 ID = 61 72 Kill ID = 62 73 Uname ID = 63 74 Semget ID = 64 75 Semop ID = 65 76 Semctl ID = 66 77 Shmdt ID = 67 78 Msgget ID = 68 79 Msgsnd ID = 69 80 Msgrcv ID = 70 81 Msgctl ID = 71 82 Fcntl ID = 72 83 Flock ID = 73 84 Fsync ID = 74 85 Fdatasync ID = 75 86 Truncate ID = 76 87 Ftruncate ID = 77 88 Getdents ID = 78 89 Getcwd ID = 79 90 Chdir ID = 80 91 Fchdir ID = 81 92 Rename ID = 82 93 Mkdir ID = 83 94 Rmdir ID = 84 95 Creat ID = 85 96 Link ID = 86 97 Unlink ID = 87 98 Symlink ID = 88 99 Readlink ID = 89 100 Chmod ID = 90 101 Fchmod ID = 91 102 Chown ID = 92 103 Fchown ID = 93 104 Lchown ID = 94 105 Umask ID = 95 106 Gettimeofday ID = 96 107 Getrlimit ID = 97 108 Getrusage ID = 98 109 Sysinfo ID = 99 110 Times ID = 100 111 Ptrace ID = 101 112 Getuid ID = 102 113 Syslog ID = 103 114 Getgid ID = 104 115 Setuid ID = 105 116 Setgid ID = 106 117 Geteuid ID = 107 118 Getegid ID = 108 119 Setpgid ID = 109 120 Getppid ID = 110 121 Getpgrp ID = 111 122 Setsid ID = 112 123 Setreuid ID = 113 124 Setregid ID = 114 125 Getgroups ID = 115 126 Setgroups ID = 116 127 Setresuid ID = 117 128 Getresuid ID = 118 129 Setresgid ID = 119 130 Getresgid ID = 120 131 Getpgid ID = 121 132 Setfsuid ID = 122 133 Setfsgid ID = 123 134 Getsid ID = 124 135 Capget ID = 125 136 Capset ID = 126 137 RtSigpending ID = 127 138 RtSigtimedwait ID = 128 139 RtSigqueueinfo ID = 129 140 RtSigsuspend ID = 130 141 Sigaltstack ID = 131 142 Utime ID = 132 143 Mknod ID = 133 144 Uselib ID = 134 145 Personality ID = 135 146 Ustat ID = 136 147 Statfs ID = 137 148 Fstatfs ID = 138 149 Sysfs ID = 139 150 Getpriority ID = 140 151 Setpriority ID = 141 152 SchedSetparam ID = 142 153 SchedGetparam ID = 143 154 SchedSetscheduler ID = 144 155 SchedGetscheduler ID = 145 156 SchedGetPriorityMax ID = 146 157 SchedGetPriorityMin ID = 147 158 SchedRrGetInterval ID = 148 159 Mlock ID = 149 160 Munlock ID = 150 161 Mlockall ID = 151 162 Munlockall ID = 152 163 Vhangup ID = 153 164 ModifyLdt ID = 154 165 PivotRoot ID = 155 166 Sysctl ID = 156 167 Prctl ID = 157 168 ArchPrctl ID = 158 169 Adjtimex ID = 159 170 Setrlimit ID = 160 171 Chroot ID = 161 172 Sync ID = 162 173 Acct ID = 163 174 Settimeofday ID = 164 175 Mount ID = 165 176 Umount2 ID = 166 177 Swapon ID = 167 178 Swapoff ID = 168 179 Reboot ID = 169 180 Sethostname ID = 170 181 Setdomainname ID = 171 182 Iopl ID = 172 183 Ioperm ID = 173 184 CreateModule ID = 174 185 InitModule ID = 175 186 DeleteModule ID = 176 187 GetKernelSyms ID = 177 188 QueryModule ID = 178 189 Quotactl ID = 179 190 Nfsservctl ID = 180 191 Getpmsg ID = 181 192 Putpmsg ID = 182 193 Afs ID = 183 194 Tuxcall ID = 184 195 Security ID = 185 196 Gettid ID = 186 197 Readahead ID = 187 198 Setxattr ID = 188 199 Lsetxattr ID = 189 200 Fsetxattr ID = 190 201 Getxattr ID = 191 202 Lgetxattr ID = 192 203 Fgetxattr ID = 193 204 Listxattr ID = 194 205 Llistxattr ID = 195 206 Flistxattr ID = 196 207 Removexattr ID = 197 208 Lremovexattr ID = 198 209 Fremovexattr ID = 199 210 Tkill ID = 200 211 Time ID = 201 212 Futex ID = 202 213 SchedSetaffinity ID = 203 214 SchedGetaffinity ID = 204 215 SetThreadArea ID = 205 216 IoSetup ID = 206 217 IoDestroy ID = 207 218 IoGetevents ID = 208 219 IoSubmit ID = 209 220 IoCancel ID = 210 221 GetThreadArea ID = 211 222 LookupDcookie ID = 212 223 EpollCreate ID = 213 224 EpollCtlOld ID = 214 225 EpollWaitOld ID = 215 226 RemapFilePages ID = 216 227 Getdents64 ID = 217 228 SetTidAddress ID = 218 229 RestartSyscall ID = 219 230 Semtimedop ID = 220 231 Fadvise64 ID = 221 232 TimerCreate ID = 222 233 TimerSettime ID = 223 234 TimerGettime ID = 224 235 TimerGetoverrun ID = 225 236 TimerDelete ID = 226 237 ClockSettime ID = 227 238 ClockGettime ID = 228 239 ClockGetres ID = 229 240 ClockNanosleep ID = 230 241 ExitGroup ID = 231 242 EpollWait ID = 232 243 EpollCtl ID = 233 244 Tgkill ID = 234 245 Utimes ID = 235 246 Vserver ID = 236 247 Mbind ID = 237 248 SetMempolicy ID = 238 249 GetMempolicy ID = 239 250 MqOpen ID = 240 251 MqUnlink ID = 241 252 MqTimedsend ID = 242 253 MqTimedreceive ID = 243 254 MqNotify ID = 244 255 MqGetsetattr ID = 245 256 KexecLoad ID = 246 257 Waitid ID = 247 258 AddKey ID = 248 259 RequestKey ID = 249 260 Keyctl ID = 250 261 IoprioSet ID = 251 262 IoprioGet ID = 252 263 InotifyInit ID = 253 264 InotifyAddWatch ID = 254 265 InotifyRmWatch ID = 255 266 MigratePages ID = 256 267 Openat ID = 257 268 Mkdirat ID = 258 269 Mknodat ID = 259 270 Fchownat ID = 260 271 Futimesat ID = 261 272 Newfstatat ID = 262 273 Unlinkat ID = 263 274 Renameat ID = 264 275 Linkat ID = 265 276 Symlinkat ID = 266 277 Readlinkat ID = 267 278 Fchmodat ID = 268 279 Faccessat ID = 269 280 Pselect6 ID = 270 281 Ppoll ID = 271 282 Unshare ID = 272 283 SetRobustList ID = 273 284 GetRobustList ID = 274 285 Splice ID = 275 286 Tee ID = 276 287 SyncFileRange ID = 277 288 Vmsplice ID = 278 289 MovePages ID = 279 290 Utimensat ID = 280 291 EpollPwait ID = 281 292 Signalfd ID = 282 293 TimerfdCreate ID = 283 294 Eventfd ID = 284 295 Fallocate ID = 285 296 TimerfdSettime ID = 286 297 TimerfdGettime ID = 287 298 Accept4 ID = 288 299 Signalfd4 ID = 289 300 Eventfd2 ID = 290 301 EpollCreate1 ID = 291 302 Dup3 ID = 292 303 Pipe2 ID = 293 304 InotifyInit1 ID = 294 305 Preadv ID = 295 306 Pwritev ID = 296 307 RtTgsigqueueinfo ID = 297 308 PerfEventOpen ID = 298 309 Recvmmsg ID = 299 310 FanotifyInit ID = 300 311 FanotifyMark ID = 301 312 Prlimit64 ID = 302 313 NameToHandleAt ID = 303 314 OpenByHandleAt ID = 304 315 ClockAdjtime ID = 305 316 Syncfs ID = 306 317 Sendmmsg ID = 307 318 Setns ID = 308 319 Getcpu ID = 309 320 ProcessVmReadv ID = 310 321 ProcessVmWritev ID = 311 322 Kcmp ID = 312 323 FinitModule ID = 313 324 SchedSetattr ID = 314 325 SchedGetattr ID = 315 326 Renameat2 ID = 316 327 Seccomp ID = 317 328 Getrandom ID = 318 329 MemfdCreate ID = 319 330 KexecFileLoad ID = 320 331 Bpf ID = 321 332 Execveat ID = 322 333 Userfaultfd ID = 323 334 Membarrier ID = 324 335 Mlock2 ID = 325 336 CopyFileRange ID = 326 337 Preadv2 ID = 327 338 Pwritev2 ID = 328 339 PkeyMprotect ID = 329 340 PkeyAlloc ID = 330 341 PkeyFree ID = 331 342 Statx ID = 332 343 IoPgetevents ID = 333 344 Rseq ID = 334 345 // 335 through 423 are unassigned to sync up with generic numbers 346 PidfdSendSignal ID = iota + 89 // iota = 335 here 335 + 89 = 424 347 IoUringSetup 348 IoUringEnter 349 IoUringRegister 350 OpenTree 351 MoveMount 352 Fsopen 353 Fsconfig 354 Fsmount 355 Fspick 356 PidfdOpen 357 Clone3 358 CloseRange 359 Openat2 360 PidfdGetfd 361 Faccessat2 362 ProcessMadvise 363 EpollPwait2 364 MountSetatt 365 QuotactlFd 366 LandlockCreateRuleset 367 LandlockAddRule 368 LandloclRestrictSet 369 MemfdSecret 370 ProcessMrelease 371 // Set of IDs for 32bit syscalls which have no parallel 64bit syscall 372 Waitpid 373 Oldfstat 374 Break 375 Oldstat 376 Umount 377 Stime 378 Stty 379 Gtty 380 Nice 381 Ftime 382 Prof 383 Signal 384 Lock 385 Mpx 386 Ulimit 387 Oldolduname 388 Sigaction 389 Sgetmask 390 Ssetmask 391 Sigsuspend 392 Sigpending 393 Oldlstat 394 Readdir 395 Profil 396 Socketcall 397 Olduname 398 Idle 399 Vm86old 400 Ipc 401 Sigreturn 402 Sigprocmask 403 Bdflush 404 Afs_syscall 405 Llseek 406 OldSelect 407 Vm86 408 OldGetrlimit 409 Mmap2 410 Truncate64 411 Ftruncate64 412 Stat64 413 Lstat64 414 Fstat64 415 Lchown16 416 Getuid16 417 Getgid16 418 Geteuid16 419 Getegid16 420 Setreuid16 421 Setregid16 422 Getgroups16 423 Setgroups16 424 Fchown16 425 Setresuid16 426 Getresuid16 427 Setresgid16 428 Getresgid16 429 Chown16 430 Setuid16 431 Setgid16 432 Setfsuid16 433 Setfsgid16 434 Fcntl64 435 Sendfile32 436 Statfs64 437 Fstatfs64 438 Fadvise64_64 439 ClockGettime32 440 ClockSettime32 441 ClockAdjtime64 442 ClockGetresTime32 443 ClockNanosleepTime32 444 TimerGettime32 445 TimerSettime32 446 TimerfdGettime32 447 TimerfdSettime32 448 UtimensatTime32 449 Pselect6Time32 450 PpollTime32 451 IoPgeteventsTime32 452 RecvmmsgTime32 453 MqTimedsendTime32 454 MqTimedreceiveTime32 455 RtSigtimedwaitTime32 456 FutexTime32 457 SchedRrGetInterval32 458 MaxSyscallID 459 ) 460 461 // x86 32bit syscall numbers 462 // Used for compatibility mode 463 // https://github.com/torvalds/linux/blob/master/arch/x86/entry/syscalls/syscall_32.tbl 464 const ( 465 Sys32restart_syscall ID = 0 466 Sys32exit ID = 1 467 Sys32fork ID = 2 468 Sys32read ID = 3 469 Sys32write ID = 4 470 Sys32open ID = 5 471 Sys32close ID = 6 472 Sys32waitpid ID = 7 473 Sys32creat ID = 8 474 Sys32link ID = 9 475 Sys32unlink ID = 10 476 Sys32execve ID = 11 477 Sys32chdir ID = 12 478 Sys32time ID = 13 479 Sys32mknod ID = 14 480 Sys32chmod ID = 15 481 Sys32lchown ID = 16 482 Sys32break ID = 17 483 Sys32oldstat ID = 18 484 Sys32lseek ID = 19 485 Sys32getpid ID = 20 486 Sys32mount ID = 21 487 Sys32umount ID = 22 488 Sys32setuid ID = 23 489 Sys32getuid ID = 24 490 Sys32stime ID = 25 491 Sys32ptrace ID = 26 492 Sys32alarm ID = 27 493 Sys32oldfstat ID = 28 494 Sys32pause ID = 29 495 Sys32utime ID = 30 496 Sys32stty ID = 31 497 Sys32gtty ID = 32 498 Sys32access ID = 33 499 Sys32nice ID = 34 500 Sys32ftime ID = 35 501 Sys32sync ID = 36 502 Sys32kill ID = 37 503 Sys32rename ID = 38 504 Sys32mkdir ID = 39 505 Sys32rmdir ID = 40 506 Sys32dup ID = 41 507 Sys32pipe ID = 42 508 Sys32times ID = 43 509 Sys32prof ID = 44 510 Sys32brk ID = 45 511 Sys32setgid ID = 46 512 Sys32getgid ID = 47 513 Sys32signal ID = 48 514 Sys32geteuid ID = 49 515 Sys32getegid ID = 50 516 Sys32acct ID = 51 517 Sys32umount2 ID = 52 518 Sys32lock ID = 53 519 Sys32ioctl ID = 54 520 Sys32fcntl ID = 55 521 Sys32mpx ID = 56 522 Sys32setpgid ID = 57 523 Sys32ulimit ID = 58 524 Sys32oldolduname ID = 59 525 Sys32umask ID = 60 526 Sys32chroot ID = 61 527 Sys32ustat ID = 62 528 Sys32dup2 ID = 63 529 Sys32getppid ID = 64 530 Sys32getpgrp ID = 65 531 Sys32setsid ID = 66 532 Sys32sigaction ID = 67 533 Sys32sgetmask ID = 68 534 Sys32ssetmask ID = 69 535 Sys32setreuid ID = 70 536 Sys32setregid ID = 71 537 Sys32sigsuspend ID = 72 538 Sys32sigpending ID = 73 539 Sys32sethostname ID = 74 540 Sys32setrlimit ID = 75 541 Sys32getrlimit ID = 76 542 Sys32getrusage ID = 77 543 Sys32gettimeofday ID = 78 544 Sys32settimeofday ID = 79 545 Sys32getgroups ID = 80 546 Sys32setgroups ID = 81 547 Sys32select ID = 82 548 Sys32symlink ID = 83 549 Sys32oldlstat ID = 84 550 Sys32readlink ID = 85 551 Sys32uselib ID = 86 552 Sys32swapon ID = 87 553 Sys32reboot ID = 88 554 Sys32readdir ID = 89 555 Sys32mmap ID = 90 556 Sys32munmap ID = 91 557 Sys32truncate ID = 92 558 Sys32ftruncate ID = 93 559 Sys32fchmod ID = 94 560 Sys32fchown ID = 95 561 Sys32getpriority ID = 96 562 Sys32setpriority ID = 97 563 Sys32profil ID = 98 564 Sys32statfs ID = 99 565 Sys32fstatfs ID = 100 566 Sys32ioperm ID = 101 567 Sys32socketcall ID = 102 568 Sys32syslog ID = 103 569 Sys32setitimer ID = 104 570 Sys32getitimer ID = 105 571 Sys32stat ID = 106 572 Sys32lstat ID = 107 573 Sys32fstat ID = 108 574 Sys32olduname ID = 109 575 Sys32iopl ID = 110 576 Sys32vhangup ID = 111 577 Sys32idle ID = 112 578 Sys32vm86old ID = 113 579 Sys32wait4 ID = 114 580 Sys32swapoff ID = 115 581 Sys32sysinfo ID = 116 582 Sys32ipc ID = 117 583 Sys32fsync ID = 118 584 Sys32sigreturn ID = 119 585 Sys32clone ID = 120 586 Sys32setdomainname ID = 121 587 Sys32uname ID = 122 588 Sys32modify_ldt ID = 123 589 Sys32adjtimex ID = 124 590 Sys32mprotect ID = 125 591 Sys32sigprocmask ID = 126 592 Sys32create_module ID = 127 593 Sys32init_module ID = 128 594 Sys32delete_module ID = 129 595 Sys32get_kernel_syms ID = 130 596 Sys32quotactl ID = 131 597 Sys32getpgid ID = 132 598 Sys32fchdir ID = 133 599 Sys32bdflush ID = 134 600 Sys32sysfs ID = 135 601 Sys32personality ID = 136 602 Sys32afs_syscall ID = 137 603 Sys32setfsuid ID = 138 604 Sys32setfsgid ID = 139 605 Sys32_llseek ID = 140 606 Sys32getdents ID = 141 607 Sys32_newselect ID = 142 608 Sys32flock ID = 143 609 Sys32msync ID = 144 610 Sys32readv ID = 145 611 Sys32writev ID = 146 612 Sys32getsid ID = 147 613 Sys32fdatasync ID = 148 614 Sys32_sysctl ID = 149 615 Sys32mlock ID = 150 616 Sys32munlock ID = 151 617 Sys32mlockall ID = 152 618 Sys32munlockall ID = 153 619 Sys32sched_setparam ID = 154 620 Sys32sched_getparam ID = 155 621 Sys32sched_setscheduler ID = 156 622 Sys32sched_getscheduler ID = 157 623 Sys32sched_yield ID = 158 624 Sys32sched_get_priority_max ID = 159 625 Sys32sched_get_priority_min ID = 160 626 Sys32sched_rr_get_interval ID = 161 627 Sys32nanosleep ID = 162 628 Sys32mremap ID = 163 629 Sys32setresuid ID = 164 630 Sys32getresuid ID = 165 631 Sys32vm86 ID = 166 632 Sys32query_module ID = 167 633 Sys32poll ID = 168 634 Sys32nfsservctl ID = 169 635 Sys32setresgid ID = 170 636 Sys32getresgid ID = 171 637 Sys32prctl ID = 172 638 Sys32rt_sigreturn ID = 173 639 Sys32rt_sigaction ID = 174 640 Sys32rt_sigprocmask ID = 175 641 Sys32rt_sigpending ID = 176 642 Sys32rt_sigtimedwait ID = 177 643 Sys32rt_sigqueueinfo ID = 178 644 Sys32rt_sigsuspend ID = 179 645 Sys32pread64 ID = 180 646 Sys32pwrite64 ID = 181 647 Sys32chown ID = 182 648 Sys32getcwd ID = 183 649 Sys32capget ID = 184 650 Sys32capset ID = 185 651 Sys32sigaltstack ID = 186 652 Sys32sendfile ID = 187 653 Sys32getpmsg ID = 188 654 Sys32putpmsg ID = 189 655 Sys32vfork ID = 190 656 Sys32ugetrlimit ID = 191 657 Sys32mmap2 ID = 192 658 Sys32truncate64 ID = 193 659 Sys32ftruncate64 ID = 194 660 Sys32stat64 ID = 195 661 Sys32lstat64 ID = 196 662 Sys32fstat64 ID = 197 663 Sys32lchown32 ID = 198 664 Sys32getuid32 ID = 199 665 Sys32getgid32 ID = 200 666 Sys32geteuid32 ID = 201 667 Sys32getegid32 ID = 202 668 Sys32setreuid32 ID = 203 669 Sys32setregid32 ID = 204 670 Sys32getgroups32 ID = 205 671 Sys32setgroups32 ID = 206 672 Sys32fchown32 ID = 207 673 Sys32setresuid32 ID = 208 674 Sys32getresuid32 ID = 209 675 Sys32setresgid32 ID = 210 676 Sys32getresgid32 ID = 211 677 Sys32chown32 ID = 212 678 Sys32setuid32 ID = 213 679 Sys32setgid32 ID = 214 680 Sys32setfsuid32 ID = 215 681 Sys32setfsgid32 ID = 216 682 Sys32pivot_root ID = 217 683 Sys32mincore ID = 218 684 Sys32madvise ID = 219 685 Sys32getdents64 ID = 220 686 Sys32fcntl64 ID = 221 687 Sys32gettid ID = 224 688 Sys32readahead ID = 225 689 Sys32setxattr ID = 226 690 Sys32lsetxattr ID = 227 691 Sys32fsetxattr ID = 228 692 Sys32getxattr ID = 229 693 Sys32lgetxattr ID = 230 694 Sys32fgetxattr ID = 231 695 Sys32listxattr ID = 232 696 Sys32llistxattr ID = 233 697 Sys32flistxattr ID = 234 698 Sys32removexattr ID = 235 699 Sys32lremovexattr ID = 236 700 Sys32fremovexattr ID = 237 701 Sys32tkill ID = 238 702 Sys32sendfile64 ID = 239 703 Sys32futex ID = 240 704 Sys32sched_setaffinity ID = 241 705 Sys32sched_getaffinity ID = 242 706 Sys32set_thread_area ID = 243 707 Sys32get_thread_area ID = 244 708 Sys32io_setup ID = 245 709 Sys32io_destroy ID = 246 710 Sys32io_getevents ID = 247 711 Sys32io_submit ID = 248 712 Sys32io_cancel ID = 249 713 Sys32fadvise64 ID = 250 714 Sys32exit_group ID = 252 715 Sys32lookup_dcookie ID = 253 716 Sys32epoll_create ID = 254 717 Sys32epoll_ctl ID = 255 718 Sys32epoll_wait ID = 256 719 Sys32remap_file_pages ID = 257 720 Sys32set_tid_address ID = 258 721 Sys32timer_create ID = 259 722 Sys32timer_settime ID = 260 723 Sys32timer_gettime ID = 261 724 Sys32timer_getoverrun ID = 262 725 Sys32timer_delete ID = 263 726 Sys32clock_settime ID = 264 727 Sys32clock_gettime ID = 265 728 Sys32clock_getres ID = 266 729 Sys32clock_nanosleep ID = 267 730 Sys32statfs64 ID = 268 731 Sys32fstatfs64 ID = 269 732 Sys32tgkill ID = 270 733 Sys32utimes ID = 271 734 Sys32fadvise64_64 ID = 272 735 Sys32vserver ID = 273 736 Sys32mbind ID = 274 737 Sys32get_mempolicy ID = 275 738 Sys32set_mempolicy ID = 276 739 Sys32mq_open ID = 277 740 Sys32mq_unlink ID = 278 741 Sys32mq_timedsend ID = 279 742 Sys32mq_timedreceive ID = 280 743 Sys32mq_notify ID = 281 744 Sys32mq_getsetattr ID = 282 745 Sys32kexec_load ID = 283 746 Sys32waitid ID = 284 747 Sys32add_key ID = 286 748 Sys32request_key ID = 287 749 Sys32keyctl ID = 288 750 Sys32ioprio_set ID = 289 751 Sys32ioprio_get ID = 290 752 Sys32inotify_init ID = 291 753 Sys32inotify_add_watch ID = 292 754 Sys32inotify_rm_watch ID = 293 755 Sys32migrate_pages ID = 294 756 Sys32openat ID = 295 757 Sys32mkdirat ID = 296 758 Sys32mknodat ID = 297 759 Sys32fchownat ID = 298 760 Sys32futimesat ID = 299 761 Sys32fstatat64 ID = 300 762 Sys32unlinkat ID = 301 763 Sys32renameat ID = 302 764 Sys32linkat ID = 303 765 Sys32symlinkat ID = 304 766 Sys32readlinkat ID = 305 767 Sys32fchmodat ID = 306 768 Sys32faccessat ID = 307 769 Sys32pselect6 ID = 308 770 Sys32ppoll ID = 309 771 Sys32unshare ID = 310 772 Sys32set_robust_list ID = 311 773 Sys32get_robust_list ID = 312 774 Sys32splice ID = 313 775 Sys32sync_file_range ID = 314 776 Sys32tee ID = 315 777 Sys32vmsplice ID = 316 778 Sys32move_pages ID = 317 779 Sys32getcpu ID = 318 780 Sys32epoll_pwait ID = 319 781 Sys32utimensat ID = 320 782 Sys32signalfd ID = 321 783 Sys32timerfd_create ID = 322 784 Sys32eventfd ID = 323 785 Sys32fallocate ID = 324 786 Sys32timerfd_settime ID = 325 787 Sys32timerfd_gettime ID = 326 788 Sys32signalfd4 ID = 327 789 Sys32eventfd2 ID = 328 790 Sys32epoll_create1 ID = 329 791 Sys32dup3 ID = 330 792 Sys32pipe2 ID = 331 793 Sys32inotify_init1 ID = 332 794 Sys32preadv ID = 333 795 Sys32pwritev ID = 334 796 Sys32rt_tgsigqueueinfo ID = 335 797 Sys32perf_event_open ID = 336 798 Sys32recvmmsg ID = 337 799 Sys32fanotify_init ID = 338 800 Sys32fanotify_mark ID = 339 801 Sys32prlimit64 ID = 340 802 Sys32name_to_handle_at ID = 341 803 Sys32open_by_handle_at ID = 342 804 Sys32clock_adjtime ID = 343 805 Sys32syncfs ID = 344 806 Sys32sendmmsg ID = 345 807 Sys32setns ID = 346 808 Sys32process_vm_readv ID = 347 809 Sys32process_vm_writev ID = 348 810 Sys32kcmp ID = 349 811 Sys32finit_module ID = 350 812 Sys32sched_setattr ID = 351 813 Sys32sched_getattr ID = 352 814 Sys32renameat2 ID = 353 815 Sys32seccomp ID = 354 816 Sys32getrandom ID = 355 817 Sys32memfd_create ID = 356 818 Sys32bpf ID = 357 819 Sys32execveat ID = 358 820 Sys32socket ID = 359 821 Sys32socketpair ID = 360 822 Sys32bind ID = 361 823 Sys32connect ID = 362 824 Sys32listen ID = 363 825 Sys32accept4 ID = 364 826 Sys32getsockopt ID = 365 827 Sys32setsockopt ID = 366 828 Sys32getsockname ID = 367 829 Sys32getpeername ID = 368 830 Sys32sendto ID = 369 831 Sys32sendmsg ID = 370 832 Sys32recvfrom ID = 371 833 Sys32recvmsg ID = 372 834 Sys32shutdown ID = 373 835 Sys32userfaultfd ID = 374 836 Sys32membarrier ID = 375 837 Sys32mlock2 ID = 376 838 Sys32copy_file_range ID = 377 839 Sys32preadv2 ID = 378 840 Sys32pwritev2 ID = 379 841 Sys32pkey_mprotect ID = 380 842 Sys32pkey_alloc ID = 381 843 Sys32pkey_free ID = 382 844 Sys32statx ID = 383 845 Sys32arch_prctl ID = 384 846 Sys32io_pgetevents ID = 385 847 Sys32rseq ID = 386 848 Sys32semget ID = 393 849 Sys32semctl ID = 394 850 Sys32shmget ID = 395 851 Sys32shmctl ID = 396 852 Sys32shmat ID = 397 853 Sys32shmdt ID = 398 854 Sys32msgget ID = 399 855 Sys32msgsnd ID = 400 856 Sys32msgrcv ID = 401 857 Sys32msgctl ID = 402 858 Sys32clock_gettime64 ID = 403 859 Sys32clock_settime64 ID = 404 860 Sys32clock_adjtime64 ID = 405 861 Sys32clock_getres_time64 ID = 406 862 Sys32clock_nanosleep_time64 ID = 407 863 Sys32timer_gettime64 ID = 408 864 Sys32timer_settime64 ID = 409 865 Sys32timerfd_gettime64 ID = 410 866 Sys32timerfd_settime64 ID = 411 867 Sys32utimensat_time64 ID = 412 868 Sys32pselect6_time64 ID = 413 869 Sys32ppoll_time64 ID = 414 870 Sys32io_pgetevents_time64 ID = 416 871 Sys32recvmmsg_time64 ID = 417 872 Sys32mq_timedsend_time64 ID = 418 873 Sys32mq_timedreceive_time64 ID = 419 874 Sys32semtimedop_time64 ID = 420 875 Sys32rt_sigtimedwait_time64 ID = 421 876 Sys32futex_time64 ID = 422 877 Sys32sched_rr_get_interval_time64 ID = 423 878 Sys32pidfd_send_signal ID = 424 879 Sys32io_uring_setup ID = 425 880 Sys32io_uring_enter ID = 426 881 Sys32io_uring_register ID = 427 882 Sys32open_tree ID = 428 883 Sys32move_mount ID = 429 884 Sys32fsopen ID = 430 885 Sys32fsconfig ID = 431 886 Sys32fsmount ID = 432 887 Sys32fspick ID = 433 888 Sys32pidfd_open ID = 434 889 Sys32clone3 ID = 435 890 Sys32close_range ID = 436 891 Sys32openat2 ID = 437 892 Sys32pidfd_getfd ID = 438 893 Sys32faccessat2 ID = 439 894 Sys32process_madvise ID = 440 895 Sys32epoll_pwait2 ID = 441 896 Sys32mount_setattr ID = 442 897 Sys32quotactl_fd ID = 443 898 Sys32landlock_create_ruleset ID = 444 899 Sys32landlock_add_rule ID = 445 900 Sys32landlock_restrict_self ID = 446 901 Sys32memfd_secret ID = 447 902 Sys32process_mrelease ID = 448 903 ) 904 905 func DefaultSyscallsToCheck() []string { 906 return []string{ 907 "read", 908 "write", 909 "open", 910 "close", 911 "ioctl", 912 "socket", 913 "sendto", 914 "recvfrom", 915 "sendmsg", 916 "recvmsg", 917 "execve", 918 "kill", 919 "getdents", 920 "ptrace", 921 "getdents64", 922 "openat", 923 "bpf", 924 "execveat", 925 } 926 }