Title
#ebpf
8p8c

8p8c

05/26/2021, 2:48 AM
Can LINUX_VERSION_CODE be extracted from osquery's own vdso and used instead of /usr/include/linux/version.h? I can't install extra packages. It should be available for both architectures (https://github.com/torvalds/linux/blob/master/arch/x86/entry/vdso/vdso-note.S, https://github.com/torvalds/linux/blob/master/arch/arm64/kernel/vdso/note.S)
a

alessandrogario

06/09/2021, 3:18 PM
3:09 PM
Hey @8p8c! Here's the PR to remove the linux/version.h dependency 🙂