Re:Show HN: Credentials dumper for Linux using eBPF
by citronneur on Wednesday July 06, 2022 @10:15AM
(#32001306)
I made a little fix, if you want to retry
[ Parent
| on HN ]
Re:Show HN: Credentials dumper for Linux using eBPF
by evgpbfhnr on Sunday July 10, 2022 @07:03PM
(#32050098)
Thanks! This happens to work for me, but the root of the problem is the same: there's no guarantee that the handle will still be in that register when the function returns; my compiler just happens to not be clobbering that register.
Anyway, this is probably good enough as a bpf demonstration and it definitely has made its impact looking at other comments here. That's probably all that matters.