ebpf
ebpf copied to clipboard
Add Go tests for memfd and friends
Add Go tests for all probes except load_kernel_module (this one will come in the next PR).
Test for shm_open was not integrated because of complicated dependencies (libraries) of that glibc API that are difficult to integrate into the busybox of the kernel_tester
Standalone versions of the poc_* C tests can be viewed here:
https://github.com/elastic/linux-fileless-execution