From d1c0a9dc281c818f23c0a2d761c906e8defe61cf Mon Sep 17 00:00:00 2001
From: Tristan d'Audibert <tristan.daudibert@orange.com>
Date: Wed, 18 Dec 2024 14:56:32 +0100
Subject: [PATCH] Add new tracingpolicy example for dynamic parameter
 extraction feature

Signed-off-by: Tristan d'Audibert <tristan.daudibert@orange.com>
---
 examples/tracingpolicy/lsm_track_grandparent.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 examples/tracingpolicy/lsm_track_grandparent.yml

diff --git a/examples/tracingpolicy/lsm_track_grandparent.yml b/examples/tracingpolicy/lsm_track_grandparent.yml
new file mode 100644
index 00000000000..3ec64054677
--- /dev/null
+++ b/examples/tracingpolicy/lsm_track_grandparent.yml
@@ -0,0 +1,14 @@
+apiVersion: cilium.io/v1alpha1
+kind: TracingPolicy
+metadata:
+  name: "lsm"
+spec:
+  lsmhooks:
+  - hook: "bprm_check_security"
+    args:
+      - index: 0
+        type: "string"
+        resolve: "mm.owner.real_parent.real_parent.comm"
+    selectors:
+      - matchActions:
+        - action: Post