flags

Documentation

Index

• func CreatePolicies(filterMap FilterMap, newBinary bool) (*policy.Policies, error)
• func GetHelpString(key string, newBinary bool) string
• func InvalidEventError(event string) error
• func InvalidEventExcludeError(event string) error
• func InvalidFilterOptionError(expr string, newBinary bool) error
• func InvalidFlagEmpty() error
• func InvalidFlagOperator(expression string) error
• func InvalidFlagValue(expression string) error
• func InvalidLogOption(opt string, newBinary bool) error
• func InvalidSetError(set string) error
• func PrepareCache(cacheSlice []string) (queue.CacheConfig, error)
• func PrepareCapabilities(capsSlice []string) (tracee.CapabilitiesConfig, error)
• func PrepareCapture(captureSlice []string, newBinary bool) (tracee.CaptureConfig, error)
• func PrepareContainers(containerFlags []string) (runtime.Sockets, error)
• func PrepareLogger(logOptions []string, newBinary bool) (logger.LoggingConfig, error)
• func PrepareRego(regoSlice []string) (rego.Config, error)
• func PrintAndExitIfHelp(ctx *cli.Context, newBinary bool)
• type FilterMap
  • func PrepareFilterMapFromFlags(filtersArr []string) (FilterMap, error)
  • func PrepareFilterMapFromPolicies(policies []PolicyFile) (FilterMap, error)
• type OutputConfig
  • func PrepareOutput(outputSlice []string, newBinary bool) (OutputConfig, error)
  • func TraceeEbpfPrepareOutput(outputSlice []string, newBinary bool) (OutputConfig, error)
• type PolicyFile
• type Rule

Functions

func CreatePolicies

func CreatePolicies(filterMap FilterMap, newBinary bool) (*policy.Policies, error)

func GetHelpString

func GetHelpString(key string, newBinary bool) string

func InvalidEventError

func InvalidEventError(event string) error

func InvalidEventExcludeError

func InvalidEventExcludeError(event string) error

func InvalidFilterOptionError

func InvalidFilterOptionError(expr string, newBinary bool) error

func InvalidFlagEmpty

func InvalidFlagEmpty() error

func InvalidFlagOperator

func InvalidFlagOperator(expression string) error

func InvalidFlagValue

func InvalidFlagValue(expression string) error

func InvalidLogOption

func InvalidLogOption(opt string, newBinary bool) error

func InvalidSetError

func InvalidSetError(set string) error

func PrepareCache

func PrepareCache(cacheSlice []string) (queue.CacheConfig, error)

func PrepareCapabilities

func PrepareCapabilities(capsSlice []string) (tracee.CapabilitiesConfig, error)

func PrepareCapture

func PrepareCapture(captureSlice []string, newBinary bool) (tracee.CaptureConfig, error)

func PrepareContainers

func PrepareContainers(containerFlags []string) (runtime.Sockets, error)

func PrepareLogger

func PrepareLogger(logOptions []string, newBinary bool) (logger.LoggingConfig, error)

func PrepareRego

func PrepareRego(regoSlice []string) (rego.Config, error)

func PrintAndExitIfHelp

func PrintAndExitIfHelp(ctx *cli.Context, newBinary bool)

Types

type FilterMap

type FilterMap map[int][]*filterFlag

FilterMap holds pre-parsed filter flag fields

func PrepareFilterMapFromFlags

func PrepareFilterMapFromFlags(filtersArr []string) (FilterMap, error)

func PrepareFilterMapFromPolicies

func PrepareFilterMapFromPolicies(policies []PolicyFile) (FilterMap, error)

PrepareFilterMapForPolicies prepares the FilterMap for the policies

type OutputConfig

type OutputConfig struct {
	TraceeConfig   *tracee.OutputConfig
	PrinterConfigs []printer.Config
}

func PrepareOutput

func PrepareOutput(outputSlice []string, newBinary bool) (OutputConfig, error)

func TraceeEbpfPrepareOutput

func TraceeEbpfPrepareOutput(outputSlice []string, newBinary bool) (OutputConfig, error)

type PolicyFile

type PolicyFile struct {
	Name          string   `yaml:"name"`
	Description   string   `yaml:"description"`
	Scope         []string `yaml:"scope"`
	DefaultAction string   `yaml:"defaultAction"`
	Rules         []Rule   `yaml:"rules"`
}

PolicyFile is the structure of the policy file

type Rule

type Rule struct {
	Event  string   `yaml:"event"`
	Filter []string `yaml:"filter"`
	Action string   `yaml:"action"`
}

Rule is the structure of the rule in the policy file