BPF verify failed with "Permission denied (os error 13)" about aya

[emanuele-em]

try to remove let pid = ctx.pid(); and check if the problem persists.
I have a problem with pid() but inside tccontext

[driftli]

try to remove let pid = ctx.pid(); and check if the problem persists. I have a problem with pid() but inside tccontext

Thanks for reply.
I just tried remove let pid = ctx.pid() and still have the problem.

[driftli]

I guess problem is on ebpf program compilation, maybe a compatibility issue. Because after I changed the kernel version to 5.14.0-148.el9.x86_64 and it can run normally. (PS: Original kernel version is 5.4.143).

There is another problem I have found on kernel 3.10.0-1160.102.1.e17.x86_64, error msg "error relocating function", but when I use SystemTap to do the same task and it passed. Just report it. Similar issue: here.

[emanuele-em]

There is another problem I have found on kernel 3.10.0-1160.102.1.e17.x86_64, error msg "error relocating function", but when I use SystemTap to do the same task and it passed. Just report it. Similar issue: #831.

Ok, as far as I know ebpf is avalaible from kernel v4.1 and fully avalaible on from kernel v4.4

https://docs.lacework.net/onboarding/ebpf-support
https://www.kernel.org/doc/html/latest/bpf/index.html
https://www.tigera.io/learn/guides/ebpf/