From 0d026c539956d103c34ed5b3e78537d23bb5068f Mon Sep 17 00:00:00 2001
From: Pragyansh Chaturvedi <pragyansh.chaturvedi@canonical.com>
Date: Wed, 3 Sep 2025 01:01:21 +0530
Subject: [PATCH] Fix syntax - make more pythonic

---
 examples/execve.py      | 8 +++++---
 pythonbpf/decorators.py | 8 ++++++++
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/examples/execve.py b/examples/execve.py
index 1fc215a..a680ff0 100644
--- a/examples/execve.py
+++ b/examples/execve.py
@@ -1,9 +1,11 @@
-from pythonbpf.decorators import tracepoint
+from pythonbpf.decorators import tracepoint, syscalls
 from ctypes import c_void_p, c_int32
 
-@tracepoint("syscalls:sys_enter_execve")
+
+@tracepoint(syscalls.sys_enter_execve)
 def trace_execve(ctx: c_void_p) -> c_int32:
-    print("execve called\n")
+    print("execve called")
     return c_int32(0)
 
+
 LICENSE = "GPL"
diff --git a/pythonbpf/decorators.py b/pythonbpf/decorators.py
index 150bd01..cb518cb 100644
--- a/pythonbpf/decorators.py
+++ b/pythonbpf/decorators.py
@@ -1,3 +1,11 @@
+from types import SimpleNamespace
+
+syscalls = SimpleNamespace(
+    sys_enter_execve="syscalls:sys_enter_execve",
+    sys_exit_execve="syscalls:sys_exit_execve",
+)
+
+
 def tracepoint(name: str):
     def wrapper(fn):
         fn._section = f"tracepoint/{name}"