-# chroot _____________________________________________________
-# long sys_chroot(const char __user * filename)
-probe nd_syscall.chroot = kprobe.function("sys_chroot") ?
-{
- name = "chroot"
- asmlinkage()
- path = user_string_quoted(pointer_arg(1))
- argstr = user_string_quoted(pointer_arg(1))
-}
-probe nd_syscall.chroot.return = kprobe.function("sys_chroot").return ?
-{
- name = "chroot"
- retstr = returnstr(1)
-}
-
# clock_adjtime ______________________________________________
# SYSCALL_DEFINE2(clock_adjtime, const clockid_t, which_clock,
# struct timex __user *, utx)
--- /dev/null
+# chroot _____________________________________________________
+# long sys_chroot(const char __user * filename)
+
+@define _SYSCALL_CHROOT_NAME
+%(
+ name = "chroot"
+%)
+
+@define _SYSCALL_CHROOT_ARGSTR
+%(
+ argstr = path
+%)
+
+probe syscall.chroot = dw_syscall.chroot !, nd_syscall.chroot {}
+probe syscall.chroot.return = dw_syscall.chroot.return !, nd_syscall.chroot.return {}
+
+# dw_chroot _____________________________________________________
+
+probe dw_syscall.chroot = kernel.function("sys_chroot").call
+{
+ @_SYSCALL_CHROOT_NAME
+ path = user_string_quoted($filename)
+ @_SYSCALL_CHROOT_ARGSTR
+}
+probe dw_syscall.chroot.return = kernel.function("sys_chroot").return
+{
+ @_SYSCALL_CHROOT_NAME
+ retstr = return_str(1, $return)
+}
+
+# nd_chroot _____________________________________________________
+
+probe nd_syscall.chroot = kprobe.function("sys_chroot") ?
+{
+ @_SYSCALL_CHROOT_NAME
+ asmlinkage()
+ path = user_string_quoted(pointer_arg(1))
+ @_SYSCALL_CHROOT_ARGSTR
+}
+probe nd_syscall.chroot.return = kprobe.function("sys_chroot").return ?
+{
+ @_SYSCALL_CHROOT_NAME
+ retstr = returnstr(1)
+}
-# chroot _____________________________________________________
-# long sys_chroot(const char __user * filename)
-probe syscall.chroot = kernel.function("sys_chroot").call
-{
- name = "chroot"
- path = user_string_quoted($filename)
- argstr = user_string_quoted($filename)
-}
-probe syscall.chroot.return = kernel.function("sys_chroot").return
-{
- name = "chroot"
- retstr = return_str(1, $return)
-}
-
# clock_adjtime ______________________________________________
# SYSCALL_DEFINE2(clock_adjtime, const clockid_t, which_clock,
# struct timex __user *, utx)