Files
python-bpf/examples/execve.py

11 lines
223 B
Python

from pythonbpf import decorators
@decorators.tracepoint("syscalls:sys_enter_execve")
def trace_execve(ctx) -> int:
decorators.trace_printk("execve called\n")
return 0
@decorators.license("GPL")
def _():
pass