chore(memtrack): remove unused execve event

Author: not-matthias

crates/memtrack/src/ebpf/c/event.h

@@ -3,13 +3,12 @@
 
 #define EVENT_TYPE_MALLOC 1
 #define EVENT_TYPE_FREE 2
-#define EVENT_TYPE_EXECVE 3
-#define EVENT_TYPE_CALLOC 4
-#define EVENT_TYPE_REALLOC 5
-#define EVENT_TYPE_ALIGNED_ALLOC 6
-#define EVENT_TYPE_MMAP 7
-#define EVENT_TYPE_MUNMAP 8
-#define EVENT_TYPE_BRK 9
+#define EVENT_TYPE_CALLOC 3
+#define EVENT_TYPE_REALLOC 4
+#define EVENT_TYPE_ALIGNED_ALLOC 5
+#define EVENT_TYPE_MMAP 6
+#define EVENT_TYPE_MUNMAP 7
+#define EVENT_TYPE_BRK 8
 
 /* Event structure - shared between BPF and userspace */
 struct event {

crates/memtrack/src/ebpf/c/memtrack.bpf.c

@@ -195,9 +195,6 @@ UPROBE_WITH_ARGS(aligned_alloc, PT_REGS_PARM2(ctx), PT_REGS_RC(ctx), EVENT_TYPE_
 /* memalign: allocates with alignment and size (legacy interface) */
 UPROBE_WITH_ARGS(memalign, PT_REGS_PARM2(ctx), PT_REGS_RC(ctx), EVENT_TYPE_ALIGNED_ALLOC)
 
-SEC("tracepoint/syscalls/sys_enter_execve")
-int tracepoint_sys_execve(struct trace_event_raw_sys_enter* ctx) { return submit_event(0, 0, EVENT_TYPE_EXECVE); }
-
 /* Map to store mmap parameters between entry and return */
 struct mmap_args {
     __u64 addr;

crates/memtrack/src/ebpf/events.rs

@@ -17,7 +17,6 @@ use bindings::*;
 pub enum EventType {
     Malloc = EVENT_TYPE_MALLOC as u8,
     Free = EVENT_TYPE_FREE as u8,
-    Execve = EVENT_TYPE_EXECVE as u8,
     Calloc = EVENT_TYPE_CALLOC as u8,
     Realloc = EVENT_TYPE_REALLOC as u8,
     AlignedAlloc = EVENT_TYPE_ALIGNED_ALLOC as u8,
@@ -31,7 +30,6 @@ impl From<u8> for EventType {
         match val as u32 {
             bindings::EVENT_TYPE_MALLOC => EventType::Malloc,
             bindings::EVENT_TYPE_FREE => EventType::Free,
-            bindings::EVENT_TYPE_EXECVE => EventType::Execve,
             bindings::EVENT_TYPE_CALLOC => EventType::Calloc,
             bindings::EVENT_TYPE_REALLOC => EventType::Realloc,
             bindings::EVENT_TYPE_ALIGNED_ALLOC => EventType::AlignedAlloc,
@@ -66,7 +64,6 @@ impl From<Event> for MemtrackEvent {
             EventType::Mmap => MemtrackEventKind::Mmap { size: val.size },
             EventType::Munmap => MemtrackEventKind::Munmap { size: val.size },
             EventType::Brk => MemtrackEventKind::Brk { size: val.size },
-            _ => panic!("This event isn't meant to be used outside of memtrack"),
         };
 
         MemtrackEvent {

crates/memtrack/src/ebpf/memtrack.rs

@@ -350,11 +350,9 @@ impl MemtrackBpf {
         Ok(())
     }
     attach_tracepoint!(sched_fork);
-    attach_tracepoint!(sys_execve);
 
     pub fn attach_tracepoints(&mut self) -> Result<()> {
         self.attach_sched_fork()?;
-        self.attach_sys_execve()?;
         Ok(())
     }