Chapter 4. Kernel Internals

Table of Contents

Core Calls In
Architecture Calls Out
<asm/ptrace.h>
<asm/syscall.h>
<linux/tracehook.h>

This chapter covers the interface to the tracing infrastructure from the core of the kernel and the architecture-specific code. This is for maintainers of the kernel and arch code, and not relevant to using the tracing facilities described in preceding chapters.

Core Calls In

tracehook_report_syscall_entry — task is about to attempt a system call
tracehook_report_syscall_exit — task has just finished a system call
tracehook_signal_handler — signal handler setup is complete
tracehook_consider_fatal_signal — suppress special handling of fatal signal
set_notify_resume — cause tracehook_notify_resume to be called
tracehook_notify_resume — report when about to return to user mode

These calls are declared in <linux/tracehook.h>. The core kernel calls these functions at various important places.