synos-kernel-observability — v45 Glasswalker — kernel observability primitives (syscalls 480-485)
tags: [kernel security]
synos-kernel-observability — v45 Glasswalker — kernel observability primitives (syscalls 480-485)
Section titled “synos-kernel-observability — v45 Glasswalker — kernel observability primitives (syscalls 480-485)”Classification: PUBLIC
Crate: fruit/crates/synos-kernel-observability/
Milestone: v0+
License: MIT OR Apache-2.0
What It Is
Section titled “What It Is”synos-kernel-observability v45 Glasswalker — kernel observability primitives (syscalls 480-485).
Architecture
Section titled “Architecture”Modules
Section titled “Modules”| Module | Purpose |
|---|---|
CgroupNode | CgroupNode module |
NetNamespaceEntry | NetNamespaceEntry module |
AnonShmemMapping | AnonShmemMapping module |
ModuleLoadEntry | ModuleLoadEntry module |
SyscallTracePin | SyscallTracePin module |
EbpfMapShadowEntry | EbpfMapShadowEntry module |
SnapshotHeader | SnapshotHeader module |
new | new module |
required_buffer_size | required_buffer_size module |
build_cgroup_tree_snapshot | build_cgroup_tree_snapshot module |
How It’s Wired
Section titled “How It’s Wired”- Internal — self-contained crate
Future Ideas
Section titled “Future Ideas”- Expand module coverage and integration points