tetragon: Allow to override execve tail calls

Signed-off-by: Jiri Olsa <jolsa@kernel.org>
cilium · Aug 30, 2024 · e24f7f6 · e24f7f6
1 parent 1fc1786
commit e24f7f6
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/bpf/process/bpf_execve_event.c b/bpf/process/bpf_execve_event.c
@@ -13,11 +13,12 @@
 
 #include "policy_filter.h"
 
+char _license[] __attribute__((section("license"), used)) = "Dual BSD/GPL";
+
+#ifndef OVERRIDE_TAILCALL
 int execve_rate(void *ctx);
 int execve_send(void *ctx);
 
-char _license[] __attribute__((section("license"), used)) = "Dual BSD/GPL";
-
 struct {
 	__uint(type, BPF_MAP_TYPE_PROG_ARRAY);
 	__uint(max_entries, 2);
@@ -29,6 +30,7 @@ struct {
 		[1] = (void *)&execve_send,
 	},
 };
+#endif
 
 #include "data_event.h"