probe::kprocess.exec(3stap) — Chainguard OS Manuals

PROBE::KPROCESS.EX(3stap)

Kernel Process Tapset

PROBE::KPROCESS.EX(3stap)

NAME

probe::kprocess.exec - Attempt to exec to a new program

probe kprocess.exec {}

argstr

A string containing the filename followed by the arguments to pass, excluding 0th arg (SystemTap v2.5+)

name

Name of the system call (“execve”) (SystemTap v2.5+)

args

The arguments to pass to the new executable, including the 0th arg (SystemTap v2.5+)

filename

The path to the new executable

The caller of exec.

Fires whenever a process attempts to exec to a new program. Aliased to the syscall.execve probe in SystemTap v2.5+.