SystemTap 5.6 adds BPF LSM/XDP probes and BTF tracepoints
SystemTap 5.6 turns its BPF runtime into a more capable Linux observability and policy tool: it adds BPF LSM hooks that can allow or deny operations, XDP packet probes with pass/drop/tx verdicts, and BTF-based tracepoint discovery without trace headers or tracefs. The release also brings statement tracing, faster parallel DWARF elaboration, richer runtime error context, Linux 7.2 compatibility, and ML-DSA module-signing support. BTF tracepoint and statement tracing support still have runtime limitations under --runtime=bpf.