https://github.com/ylarod/signaltracer

A kernel module for tracing signal
https://github.com/ylarod/signaltracer

android gki kernel module signal-trace

Last synced: 25 days ago
JSON representation

A kernel module for tracing signal

• Host: GitHub
• URL: https://github.com/ylarod/signaltracer
• Owner: Ylarod
• License: gpl-3.0
• Created: 2023-01-16T12:42:16.000Z (almost 2 years ago)
• Default Branch: main
• Last Pushed: 2023-01-17T00:28:34.000Z (almost 2 years ago)
• Last Synced: 2024-11-30T04:04:49.060Z (27 days ago)
• Topics: android, gki, kernel, module, signal-trace
• Language: C
• Homepage:
• Size: 22.5 KB
• Stars: 24
• Watchers: 3
• Forks: 8
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# SignalTracer

一个追踪信号的内核模块，支持内核5.10+

A kernel module for tracing signal, support kernel 5.10+

## Usage / 使用方法

```

# ls /sys/module/SignalTracer/parameters/

dump_kernel_stack  match_from_uid  match_sig  match_target_uid

```

## Start stacktrace / 开启调用栈打印

`echo Y > /sys/module/SignalTracer/parameters/dump_kernel_stack`

## Stop stacktrace / 关闭调用栈打印

`echo N > /sys/module/SignalTracer/parameters/dump_kernel_stack`

## Stacktrace config / 调用栈打印配置

**-1 means no restrictions**

```

# only print stacktrace when SIGKILL / 只打印 SIGKILL

echo 9 > /sys/module/SignalTracer/parameters/match_sig

# only print stacktrace when root kill someone / 只在 root 进程杀死其他进程的时候打印

echo 0 > /sys/module/SignalTracer/parameters/match_from_uid

# only print stacktrace when shell is killed / 只在 shell 进程被杀死的时候打印

echo 2000 > /sys/module/SignalTracer/parameters/match_target_uid

# With 3 restrictions above, only print when root kill -9 shell

# 有了上面的三个限制，只在 root 进程杀死 shell 进程的时候打印调用栈

```