dtrace_priv4
A dtrace provider for the kernel privilege checking api
Usage
priv:kernel:priv_check:priv-ok
priv:kernel:priv_check:priv-err
Overview
The priv provider allows for tracing the priv(9) API.
The priv:kernel:priv_check:priv-ok probe fires upon a successful kernel privilege check.
The priv:kernel:priv_check:priv-err probe fires upon a failed kernel privilege check.
The only argument to the priv probes, args[0], is the requested privilege number int priv.
Examples
Example 1: Tracing Kernel Privilege Check Failures
The following script captures an array of counters, one for each stack trace leading to a failed kernel privilege check:
priv:::priv-err
{
@traces[stack()] = count();
}
Releases
Unchanged in 4 releases since FreeBSD 14.4-RELEASE.