xref: /freebsd/share/man/man4/dtrace_priv.4 (revision 7bcd3a04c8695d797665289ed48ff2d84afb8ac4)
1*7bcd3a04SMateusz Piotrowski.\"
2*7bcd3a04SMateusz Piotrowski.\" Copyright (c) 2025 Mateusz Piotrowski <0mp@FreeBSD.org>
3*7bcd3a04SMateusz Piotrowski.\"
4*7bcd3a04SMateusz Piotrowski.\" SPDX-License-Identifier: BSD-2-Clause
5*7bcd3a04SMateusz Piotrowski.\"
6*7bcd3a04SMateusz Piotrowski.Dd November 12, 2025
7*7bcd3a04SMateusz Piotrowski.Dt DTRACE_PRIV 4
8*7bcd3a04SMateusz Piotrowski.Os
9*7bcd3a04SMateusz Piotrowski.Sh NAME
10*7bcd3a04SMateusz Piotrowski.Nm dtrace_priv
11*7bcd3a04SMateusz Piotrowski.Nd a DTrace provider for the kernel privilege checking API
12*7bcd3a04SMateusz Piotrowski.Sh SYNOPSIS
13*7bcd3a04SMateusz Piotrowski.Nm priv Ns Cm :kernel:priv_check:priv-ok
14*7bcd3a04SMateusz Piotrowski.Nm priv Ns Cm :kernel:priv_check:priv-err
15*7bcd3a04SMateusz Piotrowski.Sh DESCRIPTION
16*7bcd3a04SMateusz PiotrowskiThe
17*7bcd3a04SMateusz Piotrowski.Nm priv
18*7bcd3a04SMateusz Piotrowskiprovider allows for tracing the
19*7bcd3a04SMateusz Piotrowski.Xr priv 9
20*7bcd3a04SMateusz PiotrowskiAPI.
21*7bcd3a04SMateusz Piotrowski.Pp
22*7bcd3a04SMateusz PiotrowskiThe
23*7bcd3a04SMateusz Piotrowski.Nm priv Ns Cm :kernel:priv_check:priv-ok
24*7bcd3a04SMateusz Piotrowskiprobe fires upon a successful kernel privilege check.
25*7bcd3a04SMateusz Piotrowski.Pp
26*7bcd3a04SMateusz PiotrowskiThe
27*7bcd3a04SMateusz Piotrowski.Nm priv Ns Cm :kernel:priv_check:priv-err
28*7bcd3a04SMateusz Piotrowskiprobe fires upon a failed kernel privilege check.
29*7bcd3a04SMateusz Piotrowski.Pp
30*7bcd3a04SMateusz PiotrowskiThe only argument to the
31*7bcd3a04SMateusz Piotrowski.Nm priv
32*7bcd3a04SMateusz Piotrowskiprobes,
33*7bcd3a04SMateusz Piotrowski.Fa args[0] ,
34*7bcd3a04SMateusz Piotrowskiis the requested privilege number
35*7bcd3a04SMateusz Piotrowski.Ft int priv .
36*7bcd3a04SMateusz Piotrowski.Sh EXAMPLES
37*7bcd3a04SMateusz Piotrowski.Ss Example 1: Tracing Kernel Privilege Check Failures
38*7bcd3a04SMateusz PiotrowskiThe following script captures an array of counters,
39*7bcd3a04SMateusz Piotrowskione for each stack trace leading to a failed kernel privilege check:
40*7bcd3a04SMateusz Piotrowski.Bd -literal -offset 2n
41*7bcd3a04SMateusz Piotrowskipriv:::priv-err
42*7bcd3a04SMateusz Piotrowski{
43*7bcd3a04SMateusz Piotrowski	@traces[stack()] = count();
44*7bcd3a04SMateusz Piotrowski}
45*7bcd3a04SMateusz Piotrowski.Ed
46*7bcd3a04SMateusz Piotrowski.Sh SEE ALSO
47*7bcd3a04SMateusz Piotrowski.Xr dtrace 1 ,
48*7bcd3a04SMateusz Piotrowski.Xr tracing 7 ,
49*7bcd3a04SMateusz Piotrowski.Xr priv 9 ,
50*7bcd3a04SMateusz Piotrowski.Xr SDT 9
51*7bcd3a04SMateusz Piotrowski.Sh AUTHORS
52*7bcd3a04SMateusz Piotrowski.An -nosplit
53*7bcd3a04SMateusz PiotrowskiThe
54*7bcd3a04SMateusz Piotrowski.Nm priv
55*7bcd3a04SMateusz Piotrowskiprovider was written by
56*7bcd3a04SMateusz Piotrowski.An Robert N. M. Watson Aq Mt rwatson@FreeBSD.org .
57*7bcd3a04SMateusz Piotrowski.Pp
58*7bcd3a04SMateusz PiotrowskiThis manual page was written by
59*7bcd3a04SMateusz Piotrowski.An Mateusz Piotrowski Aq Mt 0mp@FreeBSD.org .
60