process: trace log when uid to username fails

Signed-off-by: Djalal Harouni <[email protected]>
cilium · Jun 20, 2024 · a306aa4 · a306aa4
1 parent 663c282
commit a306aa4
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 2 deletions.
diff --git a/pkg/sensors/exec/exec.go b/pkg/sensors/exec/exec.go
@@ -189,7 +189,14 @@ func handleExecve(r *bytes.Reader) ([]observer.Event, error) {
 		msgUnix.Unix.Process = nopMsgProcess()
 	}
 	if err == nil && !empty {
-		userinfo.MsgToExecveAccountUnix(msgUnix)
+		err = userinfo.MsgToExecveAccountUnix(msgUnix)
+		if err != nil {
+			logger.GetLogger().WithFields(logrus.Fields{
+				"process.pid":    msgUnix.Unix.Process.PID,
+				"process.binary": msgUnix.Unix.Process.Filename,
+				"process.uid":    msgUnix.Unix.Process.UID,
+			}).WithError(err).Trace("Resolving process uid to username record failed")
+		}
 	}
 	msgUnix.Unix.Kube = msgToExecveKubeUnix(&m, process.GetExecID(&msgUnix.Unix.Process), msgUnix.Unix.Process.Filename)
 	return []observer.Event{msgUnix}, nil

diff --git a/pkg/sensors/exec/procevents/proc_reader.go b/pkg/sensors/exec/procevents/proc_reader.go
@@ -30,6 +30,7 @@ import (
 	"github.com/cilium/tetragon/pkg/sensors/base"
 	"github.com/cilium/tetragon/pkg/sensors/exec/execvemap"
 	"github.com/cilium/tetragon/pkg/sensors/exec/userinfo"
+	"github.com/sirupsen/logrus"
 )
 
 const (
@@ -280,7 +281,14 @@ func pushExecveEvents(p procs) {
 		m.Unix.Process.Filename = filename
 		m.Unix.Process.Args = args
 
-		userinfo.MsgToExecveAccountUnix(&m)
+		err := userinfo.MsgToExecveAccountUnix(&m)
+		if err != nil {
+			logger.GetLogger().WithFields(logrus.Fields{
+				"process.pid":    p.pid,
+				"process.binary": filename,
+				"process.uid":    m.Unix.Process.UID,
+			}).WithError(err).Trace("Resolving process uid to username record failed")
+		}
 
 		observer.AllListeners(&m)
 	}