Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(ebpf): adjust inode struct to kernel v6.11 #4457

Merged

Conversation

rscampos
Copy link
Collaborator

@rscampos rscampos commented Dec 19, 2024

1. Explain what the PR does

b54f498 fix(ebpf): adjust inode struct to kernel v6.11

- Add support for three different ranges of kernel versions.
- For kernel 6.11 and newer, struct inode uses the fields
i_ctime_sec and i_ctime_nsec for time.
- For kernels 6.6 to 6.10, struct inode uses __i_ctime.
- For kernels 6.5 and older, struct inode uses i_ctime.
- Align struct inode to the kernel 6.11 structure and mock
the inode struct for kernels older than 6.11.

2. Explain how to test it

3. Other comments

Thank you, @agalauner-r7, for providing such a detailed issue report and proposing various solutions to address this issue.

fix: #4391

- Add support for three different ranges of kernel versions.
- For kernel 6.11 and newer, struct inode uses the fields
i_ctime_sec and i_ctime_nsec for time.
- For kernels 6.6 to 6.10, struct inode uses __i_ctime.
- For kernels 6.5 and older, struct inode uses i_ctime.
- Align struct inode to the kernel 6.11 structure and mock
the inode struct for kernels older than 6.11.
Copy link
Collaborator

@yanivagman yanivagman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Collaborator

@NDStrahilevitz NDStrahilevitz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@rscampos
Copy link
Collaborator Author

/fast-forward

@github-actions github-actions bot merged commit b54f498 into aquasecurity:main Dec 19, 2024
35 checks passed
@agalauner-r7
Copy link

Sorry, I missed your feedback request over the holidays.

Looks fine to me and you have merged it already. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

struct inode ctime fields changed again with Kernel >= 6.11
4 participants