Searched refs:parent_task (Results 1 – 2 of 2) sorted by relevance
708 struct task_struct* parent_task = BPF_CORE_READ(task, real_parent); in raw_tracepoint__sched_process_exec() local709 proc_exec_data->parent_pid = BPF_CORE_READ(parent_task, tgid); in raw_tracepoint__sched_process_exec()710 proc_exec_data->parent_uid = BPF_CORE_READ(parent_task, real_cred, uid.val); in raw_tracepoint__sched_process_exec()711 proc_exec_data->parent_exec_id = BPF_CORE_READ(parent_task, self_exec_id); in raw_tracepoint__sched_process_exec()712 proc_exec_data->parent_start_time = BPF_CORE_READ(parent_task, start_time); in raw_tracepoint__sched_process_exec()
182 struct task_struct *parent_task;185 err = bpf_core_read(&parent_task, sizeof(void *), &task->parent);190 /* parent_task contains the value of task->parent pointer */194 field of task struct into the ``parent_task`` variable. ``bpf_core_read()`` is