Skip to content

pivot_root

Implemented in Antinomie 0.7.0 · Syscall list

long pivot_root(const char *new_root, const char *put_old);
Number (x86-64) 155
ABI common
Kernel entry point sys_pivot_root

This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.

Swaps the root filesystem of the mount namespace with another mounted directory.

Name Type Meaning
new_root (arg0) const char * Path of the new root.
put_old (arg1) const char * Path where the old root is put.

On success: 0.

In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.

Raw return Name Meaning
-16 EBUSY The resource is busy.
-22 EINVAL An argument is invalid.
-1 EPERM The operation is not permitted for this process.

pivot_root(2) on man7.org

Coverage mark: Implemented. Every pointer argument has a capture rule in the pinned kernel patch and none of them records a “no decoder”, “address only” or “not observed” gap on any code path. Individual values can still be incomplete on a particular call; see the capture statuses.

Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).

Argument When How Recorded field key Condition
new_root (arg0) Entry the pointer itself, as a raw word args.0, args.raw[0]
↳ pointee Entry NUL-terminated string, up to 4,096 bytes (PATH_MAX) arg0.path always
put_old (arg1) Entry the pointer itself, as a raw word args.1, args.raw[1]
↳ pointee Entry NUL-terminated string, up to 4,096 bytes (PATH_MAX) arg1.path always
  • Result: ret, syscall.errno, syscall.success, syscall.duration_ns.
  • Argument words: args.new_root (arg0), args.put_old (arg1); args.0 to args.5 by position.
  • Captured strings: the args.<name> field of a path argument, and args.path, give the captured text instead of the pointer.

See Syscall Trace filter for the full syntax.

For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.