tracee icon indicating copy to clipboard operation
tracee copied to clipboard

Decode syscalls arguments

Open yanivagman opened this issue 4 years ago • 1 comments

We alreaady decode some of the syscall arguments (see #493), but there are stil some syscall arguments for which we don't decode the argument values although it can be useful.

  • [ ] nstype for setns syscall
  • [ ] cap_user_data_t for capset syscall
  • [x] struct timespec for nanosleep and some other syscalls More...

yanivagman avatar Feb 09 '21 18:02 yanivagman

also https://github.com/aquasecurity/tracee/issues/453

itaysk avatar Feb 09 '21 18:02 itaysk

Closing in favor of #2336

yanivagman avatar Jan 31 '23 09:01 yanivagman