2 * cn_proc.h - process events connector
4 * Copyright (C) Matt Helsley, IBM Corp. 2005
5 * Based on cn_fork.h by Nguyen Anh Quynh and Guillaume Thouvenin
6 * Copyright (C) 2005 Nguyen Anh Quynh <aquynh@gmail.com>
7 * Copyright (C) 2005 Guillaume Thouvenin <guillaume.thouvenin@bull.net>
9 * This program is free software; you can redistribute it and/or modify it
10 * under the terms of version 2.1 of the GNU Lesser General Public License
11 * as published by the Free Software Foundation.
13 * This program is distributed in the hope that it would be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
21 #include <linux/types.h>
24 * Userspace sends this enum to register with the kernel that it is listening
25 * for events on the connector.
27 enum proc_cn_mcast_op
{
28 PROC_CN_MCAST_LISTEN
= 1,
29 PROC_CN_MCAST_IGNORE
= 2
33 * From the user's point of view, the process
34 * ID is the thread group ID and thread ID is the internal
35 * kernel "pid". So, fields are assigned as follow:
37 * In user space - In kernel space
39 * parent process ID = parent->tgid
40 * parent thread ID = parent->pid
41 * child process ID = child->tgid
42 * child thread ID = child->pid
47 /* Use successive bits so the enums can be used to record
48 * sets of events as well
50 PROC_EVENT_NONE
= 0x00000000,
51 PROC_EVENT_FORK
= 0x00000001,
52 PROC_EVENT_EXEC
= 0x00000002,
53 PROC_EVENT_UID
= 0x00000004,
54 PROC_EVENT_GID
= 0x00000040,
55 /* "next" should be 0x00000400 */
56 /* "last" is the last process event: exit */
57 PROC_EVENT_EXIT
= 0x80000000
60 __u64
__attribute__((aligned(8))) timestamp_ns
;
61 /* Number of nano seconds since system boot */
62 union { /* must be last field of proc_event struct */
67 struct fork_proc_event
{
68 __kernel_pid_t parent_pid
;
69 __kernel_pid_t parent_tgid
;
70 __kernel_pid_t child_pid
;
71 __kernel_pid_t child_tgid
;
74 struct exec_proc_event
{
75 __kernel_pid_t process_pid
;
76 __kernel_pid_t process_tgid
;
79 struct id_proc_event
{
80 __kernel_pid_t process_pid
;
81 __kernel_pid_t process_tgid
;
83 __u32 ruid
; /* task uid */
84 __u32 rgid
; /* task gid */
92 struct exit_proc_event
{
93 __kernel_pid_t process_pid
;
94 __kernel_pid_t process_tgid
;
95 __u32 exit_code
, exit_signal
;
101 #ifdef CONFIG_PROC_EVENTS
102 void proc_fork_connector(struct task_struct
*task
);
103 void proc_exec_connector(struct task_struct
*task
);
104 void proc_id_connector(struct task_struct
*task
, int which_id
);
105 void proc_exit_connector(struct task_struct
*task
);
107 static inline void proc_fork_connector(struct task_struct
*task
)
110 static inline void proc_exec_connector(struct task_struct
*task
)
113 static inline void proc_id_connector(struct task_struct
*task
,
117 static inline void proc_exit_connector(struct task_struct
*task
)
119 #endif /* CONFIG_PROC_EVENTS */
120 #endif /* __KERNEL__ */
121 #endif /* CN_PROC_H */