tracee: Tracee fails on startup after signal other than sigint, doesn't have cleanup behavior

I ran tracee --security-alerts, hit ctrl-c, then ran it again and get the following error:

failed to add kprobe 'p:kprobes/psecurity_inode_unlink security_inode_unlink': -17
failed to create kprobe event: -17

I’ve tried running make clean && make but the problem still occurs. This is with latest in main branch (a87426a702aa1b69d38dbe1f96b8179f38471ea5)

About this issue

  • Original URL
  • State: closed
  • Created 3 years ago
  • Reactions: 1
  • Comments: 16 (11 by maintainers)

Most upvoted comments

@simar7 Agreed with what you said, but in the meantime you can fix this issue with sudo bash -c "echo "" > /sys/kernel/debug/tracing/kprobe_events"

I will investigate/fix this