From 699b282846fda241781546d2608e827d30bd1a6d Mon Sep 17 00:00:00 2001
From: Jiri Olsa <jolsa@kernel.org>
Date: Wed, 21 Aug 2024 11:14:44 +0000
Subject: [PATCH] tetragon: Allow to override execve tail calls

Signed-off-by: Jiri Olsa <jolsa@kernel.org>
---
 bpf/process/bpf_execve_event.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bpf/process/bpf_execve_event.c b/bpf/process/bpf_execve_event.c
index dee90be22bf..0a8649c02b5 100644
--- a/bpf/process/bpf_execve_event.c
+++ b/bpf/process/bpf_execve_event.c
@@ -13,11 +13,12 @@
 
 #include "policy_filter.h"
 
+char _license[] __attribute__((section("license"), used)) = "Dual BSD/GPL";
+
+#ifndef OVERRIDE_TAILCALL
 int execve_rate(void *ctx);
 int execve_send(void *ctx);
 
-char _license[] __attribute__((section("license"), used)) = "Dual BSD/GPL";
-
 struct {
 	__uint(type, BPF_MAP_TYPE_PROG_ARRAY);
 	__uint(max_entries, 2);
@@ -29,6 +30,7 @@ struct {
 		[1] = (void *)&execve_send,
 	},
 };
+#endif
 
 #include "data_event.h"