21 Jan
2025
21 Jan
'25
11:29 p.m.
On Tue, 21 Jan 2025 15:13:52 -0800 Eyal Birger eyal.birger@gmail.com wrote:
Isn't that the case already, or maybe I misunderstood what Jiri wrote [1]:
On Sun, Jan 19, 2025 at 2:44 AM Jiri Olsa olsajiri@gmail.com wrote: that's correct, uretprobe syscall is installed by kernel to special user memory map and it can be executed only from there and if process calls it from another place it receives sigill
Eyal.
Ah, he did. Thanks I missed that:
that's correct, uretprobe syscall is installed by kernel to special user memory map and it can be executed only from there and if process calls it from another place it receives sigill
-- Steve