This table represents the syscalls supported by our drivers.
🟢 means that the syscall is fully instrumented so its parameters are available to userspace. 🟡 means that the syscall is not fully instrumented so the userspace is just notified when the syscall happens but no parameters are available.
| SYSCALL | SUPPORTED |
|---|---|
| _sysctl | 🟡 |
| accept | 🟢 |
| accept4 | 🟢 |
| access | 🟢 |
| acct | 🟡 |
| add_key | 🟡 |
| adjtimex | 🟡 |
| alarm | 🟡 |
| arch_prctl | 🟡 |
| bdflush | 🟡 |
| bind | 🟢 |
| bpf | 🟢 |
| brk | 🟢 |
| capget | 🟡 |
| capset | 🟢 |
| chdir | 🟢 |
| chmod | 🟢 |
| chown | 🟢 |
| chroot | 🟢 |
| clock_adjtime | 🟡 |
| clock_getres | 🟡 |
| clock_gettime | 🟡 |
| clock_nanosleep | 🟡 |
| clock_settime | 🟡 |
| clone | 🟢 |
| clone3 | 🟢 |
| close | 🟢 |
| close_range | 🟡 |
| connect | 🟢 |
| copy_file_range | 🟢 |
| creat | 🟢 |
| create_module | 🟡 |
| delete_module | 🟡 |
| dup | 🟢 |
| dup2 | 🟢 |
| dup3 | 🟢 |
| epoll_create | 🟢 |
| epoll_create1 | 🟢 |
| epoll_ctl | 🟡 |
| epoll_ctl_old | 🟡 |
| epoll_pwait | 🟡 |
| epoll_pwait2 | 🟡 |
| epoll_wait | 🟢 |
| epoll_wait_old | 🟡 |
| eventfd | 🟢 |
| eventfd2 | 🟢 |
| execve | 🟢 |
| execveat | 🟢 |
| exit | 🟡 |
| exit_group | 🟡 |
| faccessat | 🟡 |
| faccessat2 | 🟡 |
| fadvise64 | 🟡 |
| fallocate | 🟡 |
| fanotify_init | 🟡 |
| fanotify_mark | 🟡 |
| fchdir | 🟢 |
| fchmod | 🟢 |
| fchmodat | 🟢 |
| fchown | 🟢 |
| fchownat | 🟢 |
| fcntl | 🟢 |
| fdatasync | 🟡 |
| fgetxattr | 🟡 |
| finit_module | 🟡 |
| flistxattr | 🟡 |
| flock | 🟢 |
| fork | 🟢 |
| fremovexattr | 🟡 |
| fsconfig | 🟢 |
| fsetxattr | 🟡 |
| fsmount | 🟡 |
| fsopen | 🟡 |
| fspick | 🟡 |
| fstat | 🟢 |
| fstatfs | 🟡 |
| fstatfs64 | 🟡 |
| fsync | 🟡 |
| ftruncate | 🟡 |
| futex | 🟢 |
| futex_waitv | 🟡 |
| futimesat | 🟡 |
| get_kernel_syms | 🟡 |
| get_mempolicy | 🟡 |
| get_robust_list | 🟡 |
| get_thread_area | 🟡 |
| getcpu | 🟡 |
| getcwd | 🟢 |
| getdents | 🟢 |
| getdents64 | 🟢 |
| getegid | 🟢 |
| geteuid | 🟢 |
| getgid | 🟢 |
| getgroups | 🟡 |
| getitimer | 🟡 |
| getpeername | 🟢 |
| getpgid | 🟡 |
| getpgrp | 🟡 |
| getpid | 🟡 |
| getpmsg | 🟡 |
| getppid | 🟡 |
| getpriority | 🟡 |
| getrandom | 🟡 |
| getresgid | 🟢 |
| getresuid | 🟢 |
| getrlimit | 🟢 |
| getrusage | 🟡 |
| getsid | 🟡 |
| getsockname | 🟢 |
| getsockopt | 🟢 |
| gettid | 🟡 |
| gettimeofday | 🟡 |
| getuid | 🟢 |
| getxattr | 🟡 |
| idle | 🟡 |
| init_module | 🟡 |
| inotify_add_watch | 🟡 |
| inotify_init | 🟢 |
| inotify_init1 | 🟢 |
| inotify_rm_watch | 🟡 |
| io_cancel | 🟡 |
| io_destroy | 🟡 |
| io_getevents | 🟡 |
| io_pgetevents | 🟡 |
| io_setup | 🟡 |
| io_submit | 🟡 |
| io_uring_enter | 🟢 |
| io_uring_register | 🟢 |
| io_uring_setup | 🟢 |
| ioctl | 🟢 |
| ioperm | 🟡 |
| iopl | 🟡 |
| ioprio_get | 🟡 |
| ioprio_set | 🟡 |
| ipc | 🟡 |
| kcmp | 🟡 |
| kexec_file_load | 🟡 |
| kexec_load | 🟡 |
| keyctl | 🟡 |
| kill | 🟢 |
| landlock_add_rule | 🟡 |
| landlock_create_ruleset | 🟡 |
| landlock_restrict_self | 🟡 |
| lchown | 🟢 |
| lgetxattr | 🟡 |
| link | 🟢 |
| linkat | 🟢 |
| listen | 🟢 |
| listxattr | 🟡 |
| llistxattr | 🟡 |
| lookup_dcookie | 🟡 |
| lremovexattr | 🟡 |
| lseek | 🟢 |
| lsetxattr | 🟡 |
| lstat | 🟢 |
| madvise | 🟡 |
| mbind | 🟡 |
| membarrier | 🟡 |
| memfd_create | 🟡 |
| memfd_secret | 🟡 |
| migrate_pages | 🟡 |
| mincore | 🟡 |
| mkdir | 🟢 |
| mkdirat | 🟢 |
| mknod | 🟡 |
| mknodat | 🟡 |
| mlock | 🟢 |
| mlock2 | 🟢 |
| mlockall | 🟢 |
| mmap | 🟢 |
| modify_ldt | 🟡 |
| mount | 🟢 |
| mount_setattr | 🟡 |
| move_mount | 🟡 |
| move_pages | 🟡 |
| mprotect | 🟢 |
| mq_getsetattr | 🟡 |
| mq_notify | 🟡 |
| mq_open | 🟡 |
| mq_timedreceive | 🟡 |
| mq_timedsend | 🟡 |
| mq_unlink | 🟡 |
| mremap | 🟡 |
| msgctl | 🟡 |
| msgget | 🟡 |
| msgrcv | 🟡 |
| msgsnd | 🟡 |
| msync | 🟡 |
| munlock | 🟢 |
| munlockall | 🟢 |
| munmap | 🟢 |
| name_to_handle_at | 🟡 |
| nanosleep | 🟢 |
| newfstatat | 🟡 |
| nfsservctl | 🟡 |
| nice | 🟡 |
| open | 🟢 |
| open_by_handle_at | 🟢 |
| open_tree | 🟡 |
| openat | 🟢 |
| openat2 | 🟢 |
| pause | 🟡 |
| perf_event_open | 🟡 |
| personality | 🟡 |
| pidfd_getfd | 🟡 |
| pidfd_open | 🟡 |
| pidfd_send_signal | 🟡 |
| pipe | 🟢 |
| pipe2 | 🟢 |
| pivot_root | 🟡 |
| pkey_alloc | 🟡 |
| pkey_free | 🟡 |
| pkey_mprotect | 🟡 |
| poll | 🟢 |
| ppoll | 🟢 |
| prctl | 🟢 |
| pread64 | 🟢 |
| preadv | 🟢 |
| preadv2 | 🟡 |
| prlimit64 | 🟢 |
| process_madvise | 🟡 |
| process_mrelease | 🟡 |
| process_vm_readv | 🟡 |
| process_vm_writev | 🟡 |
| pselect6 | 🟡 |
| ptrace | 🟢 |
| pwrite64 | 🟢 |
| pwritev | 🟢 |
| pwritev2 | 🟡 |
| query_module | 🟡 |
| quotactl | 🟢 |
| quotactl_fd | 🟡 |
| read | 🟢 |
| readahead | 🟡 |
| readdir | 🟡 |
| readlink | 🟡 |
| readlinkat | 🟡 |
| readv | 🟢 |
| reboot | 🟡 |
| recvfrom | 🟢 |
| recvmmsg | 🟢 |
| recvmsg | 🟢 |
| remap_file_pages | 🟡 |
| removexattr | 🟡 |
| rename | 🟢 |
| renameat | 🟢 |
| renameat2 | 🟢 |
| request_key | 🟡 |
| restart_syscall | 🟡 |
| rmdir | 🟢 |
| rseq | 🟡 |
| rt_sigaction | 🟡 |
| rt_sigpending | 🟡 |
| rt_sigprocmask | 🟡 |
| rt_sigqueueinfo | 🟡 |
| rt_sigreturn | 🟡 |
| rt_sigsuspend | 🟡 |
| rt_sigtimedwait | 🟡 |
| rt_tgsigqueueinfo | 🟡 |
| s390_guarded_storage | 🟡 |
| s390_pci_mmio_read | 🟡 |
| s390_pci_mmio_write | 🟡 |
| s390_runtime_instr | 🟡 |
| s390_sthyi | 🟡 |
| sched_get_priority_max | 🟡 |
| sched_get_priority_min | 🟡 |
| sched_getaffinity | 🟡 |
| sched_getattr | 🟡 |
| sched_getparam | 🟡 |
| sched_getscheduler | 🟡 |
| sched_rr_get_interval | 🟡 |
| sched_setaffinity | 🟡 |
| sched_setattr | 🟡 |
| sched_setparam | 🟡 |
| sched_setscheduler | 🟡 |
| sched_yield | 🟡 |
| seccomp | 🟢 |
| select | 🟢 |
| semctl | 🟢 |
| semget | 🟢 |
| semop | 🟢 |
| semtimedop | 🟡 |
| sendfile | 🟢 |
| sendmmsg | 🟢 |
| sendmsg | 🟢 |
| sendto | 🟢 |
| set_mempolicy | 🟡 |
| set_mempolicy_home_node | 🟡 |
| set_robust_list | 🟡 |
| set_thread_area | 🟡 |
| set_tid_address | 🟡 |
| setdomainname | 🟡 |
| setfsgid | 🟡 |
| setfsuid | 🟡 |
| setgid | 🟢 |
| setgroups | 🟡 |
| sethostname | 🟡 |
| setitimer | 🟡 |
| setns | 🟢 |
| setpgid | 🟢 |
| setpriority | 🟡 |
| setregid | 🟡 |
| setresgid | 🟢 |
| setresuid | 🟢 |
| setreuid | 🟡 |
| setrlimit | 🟢 |
| setsid | 🟢 |
| setsockopt | 🟢 |
| settimeofday | 🟡 |
| setuid | 🟢 |
| setxattr | 🟡 |
| shmat | 🟡 |
| shmctl | 🟡 |
| shmdt | 🟡 |
| shmget | 🟡 |
| shutdown | 🟢 |
| sigaction | 🟡 |
| sigaltstack | 🟡 |
| signal | 🟡 |
| signalfd | 🟢 |
| signalfd4 | 🟢 |
| sigpending | 🟡 |
| sigprocmask | 🟡 |
| sigreturn | 🟡 |
| sigsuspend | 🟡 |
| socket | 🟢 |
| socketcall | 🟡 |
| socketpair | 🟢 |
| splice | 🟢 |
| stat | 🟢 |
| statfs | 🟡 |
| statfs64 | 🟡 |
| statx | 🟡 |
| swapoff | 🟡 |
| swapon | 🟡 |
| symlink | 🟢 |
| symlinkat | 🟢 |
| sync | 🟡 |
| sync_file_range | 🟡 |
| syncfs | 🟡 |
| sysfs | 🟡 |
| sysinfo | 🟡 |
| syslog | 🟡 |
| tee | 🟡 |
| tgkill | 🟢 |
| time | 🟡 |
| timer_create | 🟡 |
| timer_delete | 🟡 |
| timer_getoverrun | 🟡 |
| timer_gettime | 🟡 |
| timer_settime | 🟡 |
| timerfd | 🟡 |
| timerfd_create | 🟢 |
| timerfd_gettime | 🟡 |
| timerfd_settime | 🟡 |
| times | 🟡 |
| tkill | 🟢 |
| truncate | 🟡 |
| umask | 🟡 |
| umount | 🟢 |
| umount2 | 🟢 |
| uname | 🟡 |
| unlink | 🟢 |
| unlinkat | 🟢 |
| unshare | 🟢 |
| uselib | 🟡 |
| userfaultfd | 🟢 |
| ustat | 🟡 |
| utime | 🟡 |
| utimensat | 🟡 |
| utimes | 🟡 |
| vfork | 🟢 |
| vhangup | 🟡 |
| vmsplice | 🟡 |
| wait4 | 🟡 |
| waitid | 🟡 |
| write | 🟢 |
| writev | 🟢 |