1 diff -ur sysdig-0.24.2/driver/ppm_events_public.h sysdig-0.24.2.x32/driver/ppm_events_public.h
2 --- sysdig-0.24.2/driver/ppm_events_public.h 2018-12-21 21:38:44.000000000 +0100
3 +++ sysdig-0.24.2.x32/driver/ppm_events_public.h 2019-05-24 01:33:30.717535404 +0200
5 enum ppm_event_type exit_event_type;
8 -#define SYSCALL_TABLE_SIZE 512
9 +#define SYSCALL_TABLE_SIZE 1024
12 * Filler table-related definitions
13 diff -ur sysdig-0.24.2/driver/syscall_table.c sysdig-0.24.2.x32/driver/syscall_table.c
14 --- sysdig-0.24.2/driver/syscall_table.c 2018-12-21 21:38:44.000000000 +0100
15 +++ sysdig-0.24.2.x32/driver/syscall_table.c 2019-05-24 01:36:03.747789226 +0200
18 #else /* __KERNEL__ */
19 #include <linux/unistd.h>
21 +#define SYSCALL_TABLE_ID0 __X32_SYSCALL_BIT
23 #define SYSCALL_TABLE_ID0 0
25 #endif /* __KERNEL__ */
27 #include "ppm_events_public.h"
29 [__NR_pselect6 - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
30 [__NR_epoll_create - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
31 [__NR_epoll_ctl - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
33 [__NR_uselib - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
35 [__NR_sched_setparam - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
36 [__NR_sched_getparam - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
37 [__NR_syslog - SYSCALL_TABLE_ID0] = {UF_USED | UF_ALWAYS_DROP, PPME_GENERIC_E, PPME_GENERIC_X},
39 [__NR_symlink - SYSCALL_TABLE_ID0] = PPM_SC_SYMLINK,
40 [__NR_lstat - SYSCALL_TABLE_ID0] = PPM_SC_LSTAT,
41 [__NR_readlink - SYSCALL_TABLE_ID0] = PPM_SC_READLINK,
43 [__NR_uselib - SYSCALL_TABLE_ID0] = PPM_SC_USELIB,
45 [__NR_swapon - SYSCALL_TABLE_ID0] = PPM_SC_SWAPON,
46 [__NR_reboot - SYSCALL_TABLE_ID0] = PPM_SC_REBOOT,
47 /* [__NR_old_readdir - SYSCALL_TABLE_ID0] = PPM_SC_NR_OLD_READDIR, */