// SPDX-License-Identifier: GPL-2.0 #include "vmlinux.h" #include struct { __uint(type, BPF_MAP_TYPE_RINGBUF); __uint(max_entries, 4096 /* one page */); } ringbuf SEC(".maps"); SEC("ksyscall/kill") int handle__ksyscall(pid_t pid, int sig) { int *value; value = bpf_ringbuf_reserve(&ringbuf, sizeof(int), 0); if (!value) { bpf_printk("handle__ksyscall: failed to reserve ring buffer space"); return 1; } *value = 1; bpf_ringbuf_submit(value, 0); bpf_printk("handle__ksyscall: submitted ringbuf value"); return 0; } char LICENSE[] SEC("license") = "GPL";