1 // SPDX-License-Identifier: GPL-2.0
2 /* Copyright (c) 2023 Bytedance */
5 #include <bpf/bpf_tracing.h>
6 #include <bpf/bpf_helpers.h>
10 struct cgroup *bpf_cgroup_from_id(u64 cgid) __ksym;
11 long bpf_task_under_cgroup(struct task_struct *task, struct cgroup *ancestor) __ksym;
12 void bpf_cgroup_release(struct cgroup *p) __ksym;
13 struct task_struct *bpf_task_acquire(struct task_struct *p) __ksym;
14 void bpf_task_release(struct task_struct *p) __ksym;
16 const volatile int local_pid;
17 const volatile __u64 cgid;
20 SEC("tp_btf/task_newtask")
21 int BPF_PROG(handle__task_newtask, struct task_struct *task, u64 clone_flags)
23 struct cgroup *cgrp = NULL;
24 struct task_struct *acquired;
26 if (local_pid != (bpf_get_current_pid_tgid() >> 32))
29 acquired = bpf_task_acquire(task);
33 if (local_pid == acquired->tgid)
36 cgrp = bpf_cgroup_from_id(cgid);
40 if (bpf_task_under_cgroup(acquired, cgrp))
41 remote_pid = acquired->tgid;
45 bpf_cgroup_release(cgrp);
46 bpf_task_release(acquired);
51 char _license[] SEC("license") = "GPL";