Documentation
¶
Overview ¶
Package recorder records the events of AppArmor and Seccomp, and the events from processtracer
Package recorder records the events of AppArmor, Seccomp, BPF profiles and process creation events.
Package recorder records the events of AppArmor, BPF and Seccomp from the auditor, and the events from processtracer
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AuditRecorder ¶
type AuditRecorder struct {
AuditEventCh chan string
// contains filtered or unexported fields
}
AuditRecorder saves security audit events of an AppArmor & Seccomp profile into a local file.
func NewAuditRecorder ¶
func (*AuditRecorder) CleanUp ¶
func (r *AuditRecorder) CleanUp()
func (*AuditRecorder) Close ¶
func (r *AuditRecorder) Close()
func (*AuditRecorder) Init ¶
func (r *AuditRecorder) Init() error
Init creates the record file to save the AppArmor and Seccomp audit event from the auditor
func (*AuditRecorder) Run ¶
func (r *AuditRecorder) Run()
type BpfRecorder ¶
type BpfRecorder struct {
BpfEventCh chan varmorauditor.BpfEvent
// contains filtered or unexported fields
}
BpfRecorder caches security audit events of a BPF profile into a local file.
func NewBpfRecorder ¶
func (*BpfRecorder) CleanUp ¶
func (r *BpfRecorder) CleanUp()
func (*BpfRecorder) Close ¶
func (r *BpfRecorder) Close()
func (*BpfRecorder) Init ¶
func (r *BpfRecorder) Init() error
Init create the record file to save the process creation events for the Seccomp enforcer
func (*BpfRecorder) Run ¶
func (r *BpfRecorder) Run()
type ProcessRecorder ¶ added in v0.6.0
type ProcessRecorder struct {
ProcessEventCh chan varmortracer.BpfProcessEvent
// contains filtered or unexported fields
}
ProcessRecorder caches process creation events into a local file from the processtracer
func NewProcessRecorder ¶ added in v0.6.0
func (*ProcessRecorder) CleanUp ¶ added in v0.6.0
func (r *ProcessRecorder) CleanUp()
func (*ProcessRecorder) Close ¶ added in v0.6.0
func (r *ProcessRecorder) Close()
func (*ProcessRecorder) Init ¶ added in v0.6.0
func (r *ProcessRecorder) Init() error
Init creates the record file to save the process creation events for the Seccomp enforcer
func (*ProcessRecorder) Run ¶ added in v0.6.0
func (r *ProcessRecorder) Run()
Source Files