From 95727e33748ad02eaba0d6ac3b2b728c53b6893b Mon Sep 17 00:00:00 2001
From: Pragyansh Chaturvedi <pragyansh.chaturvedi@canonical.com>
Date: Fri, 19 Sep 2025 22:35:47 +0530
Subject: [PATCH] init execve5.py to emulate ex6.bpf.c

---
 examples/execve5.py | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 examples/execve5.py

diff --git a/examples/execve5.py b/examples/execve5.py
new file mode 100644
index 0000000..f3f03bc
--- /dev/null
+++ b/examples/execve5.py
@@ -0,0 +1,22 @@
+from pythonbpf import bpf, map, section, bpfglobal, compile
+from pythonbpf.helpers import ktime, deref
+from pythonbpf.maps import HashMap
+
+from ctypes import c_void_p, c_int64, c_int32, c_uint64
+
+
+@bpf
+@section("tracepoint/syscalls/sys_enter_clone")
+def hello(ctx: c_void_p) -> c_int32:
+    ts = ktime()
+    print(f"clone called at {ts}")
+    return c_int32(0)
+
+
+@bpf
+@bpfglobal
+def LICENSE() -> str:
+    return "GPL"
+
+
+compile()