How to trace mount() and umount() syscalls using eBPF/BCC script?
Issue
- How to trace
mount()
andumount()
syscalls using eBPF/BCC script? - How to determine which processes are mounting and unmounting filesystems in what mount namespaces?
Environment
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- bcc-tools
- mountsnoop
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.