ptrace.h

linux内核的改写可以进行新的读写命令同时也可以在linux下体验编译内核的快感 这是我们os的一个project

#ifndef _LINUX_PTRACE_H
#define _LINUX_PTRACE_H
/* ptrace.h */
/* structs and defines to help the user use the ptrace system call. */

/* has the defines to get at the registers. */



/******************LKRR start 0372180****************/

/***当前进程主动要求被其父进程跟踪***/
#define PTRACE_TRACEME		   0
/***在指定地址上读取一条指令***/
#define PTRACE_PEEKTEXT		   1
/***在指定地址上读取一个字长的数据***/
#define PTRACE_PEEKDATA		   2
/***根据指定地址在USER结构区域中读寄存器***/
#define PTRACE_PEEKUSR		   3
/***在指定地址上改写一条指令***/
#define PTRACE_POKETEXT		   4
/***在指定地址上改写一个字长的数据***/
#define PTRACE_POKEDATA		   5
/***根据指定地址在USER结构区域中写寄存器***/
#define PTRACE_POKEUSR		   6
/***重新开始子进程***/
#define PTRACE_CONT		   7
/***给子进程发送SIGKILL信号结束子进程***/
#define PTRACE_KILL		   8
/***在处理器状态字（PSW）中设置Trace bit位，让子进程单步执行***/
#define PTRACE_SINGLESTEP	   9

/***连接被跟踪的子进程***/
#define PTRACE_ATTACH		0x10
/***取消原来的连接***/
#define PTRACE_DETACH		0x11

/***重新开始子进程；同PTRACE_CONT不同的是，
PTRACE_SYSCALL可以使进程在下一次系统调用开
始或结束时中止运行***/
#define PTRACE_SYSCALL		  24

/******************LKRR end 0372180****************/




/* 0x4200-0x4300 are reserved for architecture-independent additions.  */
#define PTRACE_SETOPTIONS	0x4200
#define PTRACE_GETEVENTMSG	0x4201
#define PTRACE_GETSIGINFO	0x4202
#define PTRACE_SETSIGINFO	0x4203

/* options set using PTRACE_SETOPTIONS */
#define PTRACE_O_TRACESYSGOOD	0x00000001
#define PTRACE_O_TRACEFORK	0x00000002
#define PTRACE_O_TRACEVFORK	0x00000004
#define PTRACE_O_TRACECLONE	0x00000008
#define PTRACE_O_TRACEEXEC	0x00000010
#define PTRACE_O_TRACEVFORKDONE	0x00000020
#define PTRACE_O_TRACEEXIT	0x00000040

#define PTRACE_O_MASK		0x0000007f

/* Wait extended result codes for the above trace options.  */
#define PTRACE_EVENT_FORK	1
#define PTRACE_EVENT_VFORK	2
#define PTRACE_EVENT_CLONE	3
#define PTRACE_EVENT_EXEC	4
#define PTRACE_EVENT_VFORK_DONE	5
#define PTRACE_EVENT_EXIT	6

#include <asm/ptrace.h>

#ifdef __KERNEL__
/*
 * Ptrace flags
 */


/******************LKRR start 0372180****************/

/***ptrace(0)被调用时置位***/
#define PT_PTRACED	0x00000001
/***delayed trace (used on m68k)***/
#define PT_DTRACE	0x00000002	/* delayed trace (used on m68k, i386) */
/***正在跟踪系统调用***/
#define PT_TRACESYSGOOD	0x00000004
#define PT_PTRACE_CAP	0x00000008	/* ptracer can follow suid-exec */
#define PT_TRACE_FORK	0x00000010
#define PT_TRACE_VFORK	0x00000020
#define PT_TRACE_CLONE	0x00000040
#define PT_TRACE_EXEC	0x00000080
#define PT_TRACE_VFORK_DONE	0x00000100
#define PT_TRACE_EXIT	0x00000200
#define PT_ATTACHED	0x00000400	/* parent != real_parent */

#define PT_TRACE_MASK	0x000003f4

/* single stepping state bits (used on ARM and PA-RISC) */
#define PT_SINGLESTEP_BIT	31
#define PT_SINGLESTEP		(1<<PT_SINGLESTEP_BIT)
#define PT_BLOCKSTEP_BIT	30
#define PT_BLOCKSTEP		(1<<PT_BLOCKSTEP_BIT)

#include <linux/compiler.h>		/* For unlikely.  */
#include <linux/sched.h>		/* For struct task_struct.  */

extern int ptrace_readdata(struct task_struct *tsk, unsigned long src, char __user *dst, int len);
extern int ptrace_writedata(struct task_struct *tsk, char __user *src, unsigned long dst, int len);
/***连接被跟踪的子进程***/
extern int ptrace_attach(struct task_struct *tsk);
/***取消原来的连接***/
extern int ptrace_detach(struct task_struct *, unsigned int);

/******************LKRR end 0372180****************/


extern void ptrace_disable(struct task_struct *);
extern int ptrace_check_attach(struct task_struct *task, int kill);
extern int ptrace_request(struct task_struct *child, long request, long addr, long data);
extern void ptrace_notify(int exit_code);
extern void __ptrace_link(struct task_struct *child,
			  struct task_struct *new_parent);
extern void __ptrace_unlink(struct task_struct *child);
extern void ptrace_untrace(struct task_struct *child);

static inline void ptrace_link(struct task_struct *child,
			       struct task_struct *new_parent)
{
	if (unlikely(child->ptrace))
		__ptrace_link(child, new_parent);
}
static inline void ptrace_unlink(struct task_struct *child)
{
	if (unlikely(child->ptrace))
		__ptrace_unlink(child);
}


#ifndef force_successful_syscall_return
/*
 * System call handlers that, upon successful completion, need to return a
 * negative value should call force_successful_syscall_return() right before
 * returning.  On architectures where the syscall convention provides for a
 * separate error flag (e.g., alpha, ia64, ppc{,64}, sparc{,64}, possibly
 * others), this macro can be used to ensure that the error flag will not get
 * set.  On architectures which do not support a separate error flag, the macro
 * is a no-op and the spurious error condition needs to be filtered out by some
 * other means (e.g., in user-level, by passing an extra argument to the
 * syscall handler, or something along those lines).
 */
#define force_successful_syscall_return() do { } while (0)
#endif

#endif

#endif