ROX-33217: Instrument inode tracking on directory being created path mkdir#465

Merged

JoukoVirtanen merged 32 commits intomainfrom

jv-ROX-33217-instrument-inode-tracking-on-directory-being-created-path_mkdir

Apr 10, 2026

Commits on Apr 9, 2026

X-Smart-Branch-Parent: main
JoukoVirtanen
committed
Added integration tests
JoukoVirtanen
committed
Instrument inode tracking on directory being created
JoukoVirtanen
committed
Only tracking directories if the parent is monitored
JoukoVirtanen
committed
Removed some comments
JoukoVirtanen
committed
Combined two uses of BPF_CORE_READ
JoukoVirtanen
committed
Added DIR_ACTIVITY_CREATION
JoukoVirtanen
committed
Added permalink to linux/stat.h
JoukoVirtanen
committed
Removing map entry in case of early return in lsm/d_instantiate
JoukoVirtanen
committed
Using os.makedirs instead of os.mkdir three times
JoukoVirtanen
committed
Accumulate m.path_mkdir and m.d_instantiate
JoukoVirtanen
committed
Checking pid_tgid earlier so if inode is null we still cleanup
JoukoVirtanen
committed
Not using BPF_F_NO_PREALLOC
JoukoVirtanen
committed
Switched from BPF_MAP_TYPE_HASH to BPF_MAP_TYPE_LRU_HASH
JoukoVirtanen
committed
Apply suggestion from @Molter73

JoukoVirtanen
and
Molter73
committed
Parameterized test
JoukoVirtanen
committed
Fixed verifier issue. Not sending directory creation events
JoukoVirtanen
committed
make format
JoukoVirtanen
committed
Improved test Event constructor
JoukoVirtanen
committed
Remove is_dir_creation
JoukoVirtanen
committed
Removed unneeded S_ISDIR
JoukoVirtanen
committed
make format
JoukoVirtanen
committed
Update tests/test_path_mkdir.py

JoukoVirtanen
and
Molter73
committed
Fixes after rebase
JoukoVirtanen
committed
Moved the check for null inode up
JoukoVirtanen
committed
Not adding a new event type field to Event struct
JoukoVirtanen
committed
make format
JoukoVirtanen
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ROX-33217: Instrument inode tracking on directory being created path mkdir#465

ROX-33217: Instrument inode tracking on directory being created path mkdir#465
JoukoVirtanen merged 32 commits intomainfrom
jv-ROX-33217-instrument-inode-tracking-on-directory-being-created-path_mkdir

Commits on Apr 9, 2026

X-Smart-Branch-Parent: main

Added integration tests

Instrument inode tracking on directory being created

Only tracking directories if the parent is monitored

Removed some comments

Combined two uses of BPF_CORE_READ

Added DIR_ACTIVITY_CREATION

Added permalink to linux/stat.h

Removing map entry in case of early return in lsm/d_instantiate

Using os.makedirs instead of os.mkdir three times

Accumulate m.path_mkdir and m.d_instantiate

Checking pid_tgid earlier so if inode is null we still cleanup

Not using BPF_F_NO_PREALLOC

Switched from BPF_MAP_TYPE_HASH to BPF_MAP_TYPE_LRU_HASH

Apply suggestion from @Molter73

Parameterized test

Fixed verifier issue. Not sending directory creation events

make format

Improved test Event constructor

Remove is_dir_creation

Removed unneeded S_ISDIR

make format

Update tests/test_path_mkdir.py

Fixes after rebase

Moved the check for null inode up

Not adding a new event type field to Event struct

make format

Commits on Apr 10, 2026

Empty commit

Apply suggestions from code review

Fixed syntax error

make format

Fixed clippy errors