base

Documentation

Index

• Variables
• func ExecObj() string
• func GetDefaultMaps() []*program.Map
• func GetDefaultPrograms() []*program.Program
• func GetExecveMap() *program.Map
• func GetExecveMapStats() *program.Map
• func GetInitialSensor() *sensors.Sensor
• func GetTetragonConfMap() *program.Map

Variables

var (
	Execve = program.Builder(
		ExecObj(),
		"sched/sched_process_exec",
		"tracepoint/sys_execve",
		"event_execve",
		"execve",
	)

	ExecveBprmCommit = program.Builder(
		"bpf_execve_bprm_commit_creds.o",
		"security_bprm_committing_creds",
		"kprobe/security_bprm_committing_creds",
		"tg_kp_bprm_committing_creds",
		"kprobe",
	)

	Exit = program.Builder(
		"bpf_exit.o",
		"acct_process",
		"kprobe/acct_process",
		"event_exit",
		"kprobe",
	)

	Fork = program.Builder(
		"bpf_fork.o",
		"wake_up_new_task",
		"kprobe/wake_up_new_task",
		"kprobe_pid_clear",
		"kprobe",
	)

	/* Event Ring map */
	TCPMonMap = program.MapBuilder("tcpmon_map", Execve)
	/* Networking and Process Monitoring maps */
	ExecveMap          = program.MapBuilder("execve_map", Execve)
	ExecveTailCallsMap = program.MapBuilderPin("execve_calls", "execve_calls", Execve)

	ExecveJoinMap = program.MapBuilder("tg_execve_joined_info_map", ExecveBprmCommit)

	/* Tetragon runtime configuration */
	TetragonConfMap = program.MapBuilder("tg_conf_map", Execve)

	/* Internal statistics for debugging */
	ExecveStats        = program.MapBuilder("execve_map_stats", Execve)
	ExecveJoinMapStats = program.MapBuilder("tg_execve_joined_info_map_stats", ExecveBprmCommit)
	StatsMap           = program.MapBuilder("tg_stats_map", Execve)
)

Functions

func ExecObj

func ExecObj() string

ExecObj returns the exec object based on the kernel version

func GetDefaultMaps

func GetDefaultMaps() []*program.Map

func GetDefaultPrograms

func GetDefaultPrograms() []*program.Program

func GetExecveMap

func GetExecveMap() *program.Map

func GetExecveMapStats

func GetExecveMapStats() *program.Map

func GetInitialSensor

func GetInitialSensor() *sensors.Sensor

GetInitialSensor returns the base sensor

func GetTetragonConfMap

func GetTetragonConfMap() *program.Map