aa-ebpf 0.0.1-alpha.8

eBPF-based kernel-level monitoring hooks for Agent Assembly
1
2
3
4
5
6
7
8
9
10
11

//! Kprobe modules for file I/O syscall interception.
//!
//! Each submodule implements the attachment and event handling logic for
//! one syscall kprobe. The actual eBPF program bytecode is compiled
//! separately (see `aa-ebpf-probes`) and loaded by [`crate::loader::FileIoLoader`].

pub mod openat;
pub mod read;
pub mod rename;
pub mod unlink;
pub mod write;