fix(ebpf): fix hidden_kernel_module not found symbol (#3834)

aquasecurity · Feb 22, 2024 · 5cb5760 · 5cb5760
1 parent c53f203
commit 5cb5760
Show file tree

Hide file tree

Showing 9 changed files with 104 additions and 128 deletions.
diff --git a/pkg/ebpf/bpf_log.go b/pkg/ebpf/bpf_log.go
@@ -28,6 +28,9 @@ const (
 	BPFLogIDGetCurrentComm // BPF_LOG_ID_GET_CURRENT_COMM
 	BPFLogIDTailCall       // BPF_LOG_ID_TAIL_CALL
 	BPFLogIDMemRead        // BPF_LOG_ID_MEM_READ
+
+	// hidden kernel module functions
+	BPFLogIDHidKerMod
 )
 
 var stringMap = map[BPFLogType]string{
@@ -43,6 +46,9 @@ var stringMap = map[BPFLogType]string{
 	BPFLogIDGetCurrentComm: "BPF_LOG_ID_GET_CURRENT_COMM",
 	BPFLogIDTailCall:       "BPF_LOG_ID_TAIL_CALL",
 	BPFLogIDMemRead:        "BPF_LOG_ID_MEM_READ",
+
+	// hidden kernel module functions
+	BPFLogIDHidKerMod: "BPF_LOG_ID_HID_KER_MOD",
 }
 
 var errorMap = map[BPFLogType]string{
@@ -58,6 +64,9 @@ var errorMap = map[BPFLogType]string{
 	BPFLogIDGetCurrentComm: "Failed to get current command",
 	BPFLogIDTailCall:       "Failed to tail call",
 	BPFLogIDMemRead:        "Failed to read memory",
+
+	// hidden kernel module functions
+	BPFLogIDHidKerMod: "Failure in hidden kernel module seeker logic",
 }
 
 func (b BPFLogType) String() string {