1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
global mask
probe module("nfs").function("nfs_do_access") {
mask = $mask
}
probe module("nfs").function("nfs_do_access").return {
printf("nfs_do_access(%s): mask %s return %d \n", execname(), file_modes(mask), $return);
}
probe module("nfs").function("nfs4_proc_access").return {
printf("nfs4_proc_access(%s): return %d \n", execname(), $return);
}
probe module("auth_rpcgss").function("gss_match") {
printf("gss_match(%s): uid %d \n", execname(), $acred->uid);
}
probe module("auth_rpcgss").function("gss_match").return {
printf("gss_match(%s): return %d \n", execname(), $return);
}
probe module("auth_rpcgss").function("gss_lookup_cred").return {
printf("gss_lookup_cred(%s): %s \n", execname(), rpc_cred_uid($return));
//print_stack(backtrace());
}
probe module("auth_rpcgss").function("gss_refresh").return {
printf("gss_lookup_cred(%s): %d \n", execname(), $return);
}
probe module("sunrpc").function("rpcauth_lookup_credcache").return {
printf("rpcauth_lookup_credcache(%s): %s \n", execname(), rpc_cred_uid($return));
}
probe module("sunrpc").function("rpcauth_lookupcred").return {
printf("rpcauth_lookupcred(%s): %s \n", execname(), rpc_cred_uid($return));
}
probe module("sunrpc").function("rpc_lookup_machine_cred").return {
printf("rpc_lookup_machine_cred(%s): %s \n", execname(), rpc_cred_uid($return));
}
probe module("sunrpc").function("rpcauth_bind_root_cred") {
printf("rpcauth_bind_root_cred(%s): %p \n", execname(), $task);
}
probe module("sunrpc").function("rpcauth_generic_bind_cred") {
printf("rpcauth_generic_bind_cred(%s): %p \n", execname(), $task);
}
probe begin { log("starting gss probe") }
probe end { log("ending gss probe") }
|
