ebpf icon indicating copy to clipboard operation
ebpf copied to clipboard

Add Go tests for memfd and friends

Open stanek-michal opened this issue 1 year ago • 0 comments

Add Go tests for all probes except load_kernel_module (this one will come in the next PR).

Test for shm_open was not integrated because of complicated dependencies (libraries) of that glibc API that are difficult to integrate into the busybox of the kernel_tester

Standalone versions of the poc_* C tests can be viewed here: https://github.com/elastic/linux-fileless-execution

stanek-michal avatar Mar 19 '24 01:03 stanek-michal