1TRACEHOOK_REPORT_EXE(9) Kernel Internals TRACEHOOK_REPORT_EXE(9)
2
3
4
6 tracehook_report_exec - a successful exec was completed
7
9 void tracehook_report_exec(struct linux_binfmt * fmt,
10 struct linux_binprm * bprm,
11 struct pt_regs * regs);
12
14 fmt
15
16 struct linux_binfmt that performed the exec
17
18 bprm
19
20 struct linux_binprm containing exec details
21
22 regs
23 user-mode register state
24
26 An exec just completed, we are shortly going to return to user mode.
27 The freshly initialized register state can be seen and changed in regs.
28 The name, file and other pointers in bprm are still on hand to be
29 inspected, but will be freed as soon as this returns.
30
31 Called with no locks, but with some kernel resources held live and a
32 reference on fmt->module.
33
34
35
36Kernel Hackers Manual 2.6. November 2011 TRACEHOOK_REPORT_EXE(9)