@@ -2359,6 +2359,14 @@ union bpf_attr {
* Return
* A **struct bpf_tcp_sock** pointer on success, or NULL in
* case of failure.
+ *
+ * int bpf_progenyof(int pid)
+ * Description
+ * This helper is useful in programs that want to filter events
+ * happening to a pid of any of its descendants.
+ * Return
+ * 1 if the currently executing process' pid is in the process
+ * hierarchy of the passed pid. 0 Otherwise.
*/
#define __BPF_FUNC_MAPPER(FN) \
FN(unspec), \
@@ -2457,7 +2465,8 @@ union bpf_attr {
FN(spin_lock), \
FN(spin_unlock), \
FN(sk_fullsock), \
- FN(tcp_sock),
+ FN(tcp_sock), \
+ FN(progenyof),
/* integer value in 'imm' field of BPF_CALL instruction selects which helper
* function eBPF program intends to call