Index: kernel/fs/proc/array.c =================================================================== --- kernel.orig/fs/proc/array.c +++ kernel/fs/proc/array.c @@ -395,13 +395,20 @@ static inline void task_seccomp(struct s seq_putc(m, '\n'); } +#include static inline void task_context_switch_counts(struct seq_file *m, struct task_struct *p) { + int *newpid; + seq_printf(m, "voluntary_ctxt_switches:\t%lu\n" "nonvoluntary_ctxt_switches:\t%lu\n", p->nvcsw, p->nivcsw); + + newpid = klp_shadow_get(p, 0); + if (newpid) + seq_printf(m, "newpid:\t%d\n", *newpid); } static void task_cpus_allowed(struct seq_file *m, struct task_struct *task) Index: kernel/kernel/exit.c =================================================================== --- kernel.orig/kernel/exit.c +++ kernel/kernel/exit.c @@ -791,6 +791,7 @@ static void check_stack_usage(void) static inline void check_stack_usage(void) {} #endif +#include void do_exit(long code) { struct task_struct *tsk = current; @@ -888,6 +889,8 @@ void do_exit(long code) check_stack_usage(); exit_thread(); + klp_shadow_free(tsk, 0, NULL); + /* * Flush inherited counters to the parent - before the parent * gets woken up by child-exit notifications. Index: kernel/kernel/fork.c =================================================================== --- kernel.orig/kernel/fork.c +++ kernel/kernel/fork.c @@ -1760,6 +1760,7 @@ struct task_struct *fork_idle(int cpu) * It copies the process, and if successful kick-starts * it and waits for it to finish using the VM if required. */ +#include long do_fork(unsigned long clone_flags, unsigned long stack_start, unsigned long stack_size, @@ -1797,6 +1798,13 @@ long do_fork(unsigned long clone_flags, if (!IS_ERR(p)) { struct completion vfork; struct pid *pid; + int *newpid; + static int ctr = 0; + + newpid = klp_shadow_get_or_alloc(p, 0, sizeof(*newpid), GFP_KERNEL, + NULL, NULL); + if (newpid) + *newpid = ctr++; trace_sched_process_fork(current, p);