PROBE::KPROCESS.EX(3stap) Kernel Process Tapset PROBE::KPROCESS.EX(3stap)

probe::kprocess.exec - Attempt to exec to a new program

kprocess.exec

filename

The path to the new executable

name

Name of the system call (“execve”) (SystemTap v2.5+)

args

The arguments to pass to the new executable, including the 0th arg (SystemTap v2.5+)

argstr

A string containing the filename followed by the arguments to pass, excluding 0th arg (SystemTap v2.5+)

The caller of exec.

Fires whenever a process attempts to exec to a new program. Aliased to the syscall.execve probe in SystemTap v2.5+.

tapset::kprocess(3stap)

April 2024 SystemTap Tapset Reference