@@ -324,12 +324,12 @@ const struct ppm_event_info g_event_info[PPM_EVENT_MAX] = {
324
324
/* PPME_SYSCALL_LINK_2_X */ {"link" , EC_FILE , EF_NONE , 3 , {{"res" , PT_ERRNO , PF_DEC }, {"oldpath" , PT_FSPATH , PF_NA }, {"newpath" , PT_FSPATH , PF_NA } } },
325
325
/* PPME_SYSCALL_LINKAT_2_E */ {"linkat" , EC_FILE , EF_NONE , 0 },
326
326
/* PPME_SYSCALL_LINKAT_2_X */ {"linkat" , EC_FILE , EF_NONE , 6 , {{"res" , PT_ERRNO , PF_DEC }, {"olddir" , PT_FD , PF_DEC }, {"oldpath" , PT_CHARBUF , PF_NA }, {"newdir" , PT_FD , PF_DEC }, {"newpath" , PT_CHARBUF , PF_NA }, {"flags" , PT_FLAGS32 , PF_HEX , linkat_flags } } },
327
- /* PPME_SYSCALL_FCHMODAT_E */ {"fchmodat" , EC_FILE , EF_MODIFIES_STATE , 0 },
328
- /* PPME_SYSCALL_FCHMODAT_X */ {"fchmodat" , EC_FILE , EF_MODIFIES_STATE , 4 , {{"res" , PT_ERRNO , PF_DEC }, {"dirfd" , PT_FD , PF_DEC }, {"filename" , PT_FSPATH , PF_NA }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } },
329
- /* PPME_SYSCALL_CHMOD_E */ {"chmod" , EC_FILE , EF_MODIFIES_STATE , 0 },
330
- /* PPME_SYSCALL_CHMOD_X */ {"chmod" , EC_FILE , EF_MODIFIES_STATE , 3 , {{"res" , PT_ERRNO , PF_DEC }, {"filename" , PT_FSPATH , PF_NA }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } },
331
- /* PPME_SYSCALL_FCHMOD_E */ {"fchmod" , EC_FILE , EF_MODIFIES_STATE , 0 },
332
- /* PPME_SYSCALL_FCHMOD_X */ {"fchmod" , EC_FILE , EF_MODIFIES_STATE , 3 , {{"res" , PT_ERRNO , PF_DEC }, {"fd" , PT_FD , PF_DEC }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } }
327
+ /* PPME_SYSCALL_FCHMODAT_E */ {"fchmodat" , EC_FILE , EF_NONE , 0 },
328
+ /* PPME_SYSCALL_FCHMODAT_X */ {"fchmodat" , EC_FILE , EF_NONE , 4 , {{"res" , PT_ERRNO , PF_DEC }, {"dirfd" , PT_FD , PF_DEC }, {"filename" , PT_FSPATH , PF_NA }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } },
329
+ /* PPME_SYSCALL_CHMOD_E */ {"chmod" , EC_FILE , EF_NONE , 0 },
330
+ /* PPME_SYSCALL_CHMOD_X */ {"chmod" , EC_FILE , EF_NONE , 3 , {{"res" , PT_ERRNO , PF_DEC }, {"filename" , PT_FSPATH , PF_NA }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } },
331
+ /* PPME_SYSCALL_FCHMOD_E */ {"fchmod" , EC_FILE , EF_NONE , 0 },
332
+ /* PPME_SYSCALL_FCHMOD_X */ {"fchmod" , EC_FILE , EF_NONE , 3 , {{"res" , PT_ERRNO , PF_DEC }, {"fd" , PT_FD , PF_DEC }, {"mode" , PT_MODE , PF_OCT , chmod_mode } } }
333
333
334
334
/* NB: Starting from scap version 1.2, event types will no longer be changed when an event is modified, and the only kind of change permitted for pre-existent events is adding parameters.
335
335
* New event types are allowed only for new syscalls or new internal events.
0 commit comments