caps

Documentation

Index

• func AreSubset(a uint64, set uint64) bool
• func GetCapabilities(capInt uint64) string
• func GetCapabilitiesHex(capInt uint64) string
• func GetCapabilitiesTypes(capInt uint64) []tetragon.CapabilitiesType
• func GetCapability(capInt int32) (string, error)
• func GetCapsFullSet() uint64
• func GetCurrentCapabilities() *tetragon.Capabilities
• func GetLastCap() int32
• func GetMsgCapabilities(caps processapi.MsgCapabilities) *tetragon.Capabilities
• func GetPIDCaps(filename string) (uint32, uint64, uint64, uint64)
• func GetPrivilegesChangedReasons(reasons uint32) []tetragon.ProcessPrivilegesChanged
• func GetSecureBitsTypes(secBit uint32) []tetragon.SecureBitsType

Functions

func AreSubset

func AreSubset(a uint64, set uint64) bool

AreSubset() Checks if "a" is a subset of "set" Rerturns true if all "a" capabilities are also in "set", otherwise false.

func GetCapabilities

func GetCapabilities(capInt uint64) string

func GetCapabilitiesHex

func GetCapabilitiesHex(capInt uint64) string

func GetCapabilitiesTypes

func GetCapabilitiesTypes(capInt uint64) []tetragon.CapabilitiesType

func GetCapability

func GetCapability(capInt int32) (string, error)

func GetCapsFullSet

func GetCapsFullSet() uint64

GetCapsFullSet() Returns up to date (go unix library) full set.

func GetCurrentCapabilities

func GetCurrentCapabilities() *tetragon.Capabilities

func GetLastCap

func GetLastCap() int32

GetLastCap() Returns unix.CAP_LAST_CAP unless the kernel defines another last cap which is the case for old kernels.

func GetMsgCapabilities

func GetMsgCapabilities(caps processapi.MsgCapabilities) *tetragon.Capabilities

func GetPIDCaps

func GetPIDCaps(filename string) (uint32, uint64, uint64, uint64)

func GetPrivilegesChangedReasons

func GetPrivilegesChangedReasons(reasons uint32) []tetragon.ProcessPrivilegesChanged

func GetSecureBitsTypes

func GetSecureBitsTypes(secBit uint32) []tetragon.SecureBitsType