base

Documentation

Index

• Variables
• func GetDefaultMaps() []*program.Map
• func GetDefaultPrograms() []*program.Program
• func GetExecveMap() *program.Map
• func GetExecveMapStats() *program.Map
• func GetInitialSensor() *sensors.Sensor
• func GetTetragonConfMap() *program.Map

Variables

var (
	Execve = program.Builder(
		"bpf_execve_event.o",
		"sched/sched_process_exec",
		"tracepoint/sys_execve",
		"event_execve",
		"execve",
	)

	ExecveV53 = program.Builder(
		"bpf_execve_event_v53.o",
		"sched/sched_process_exec",
		"tracepoint/sys_execve",
		"event_execve",
		"execve",
	)

	ExecveV60 = program.Builder(
		"bpf_execve_event_v60.o",
		"sched/sched_process_exec",
		"tracepoint/sys_execve",
		"event_execve",
		"execve",
	)

	Exit = program.Builder(
		"bpf_exit.o",
		"__put_task_struct",
		"kprobe/__put_task_struct",
		"event_exit",
		"kprobe",
	)

	Fork = program.Builder(
		"bpf_fork.o",
		"wake_up_new_task",
		"kprobe/wake_up_new_task",
		"kprobe_pid_clear",
		"kprobe",
	)

	/* Event Ring map */
	TCPMonMap    = program.MapBuilder("tcpmon_map", Execve)
	TCPMonMapV53 = program.MapBuilder("tcpmon_map", ExecveV53)
	TCPMonMapV60 = program.MapBuilder("tcpmon_map", ExecveV60)

	/* Networking and Process Monitoring maps */
	ExecveMap    = program.MapBuilder("execve_map", Execve)
	ExecveMapV53 = program.MapBuilder("execve_map", ExecveV53)
	ExecveMapV60 = program.MapBuilder("execve_map", ExecveV60)

	ExecveTailCallsMap    = program.MapBuilderPin("execve_calls", "execve_calls", Execve)
	ExecveTailCallsMapV53 = program.MapBuilderPin("execve_calls", "execve_calls", ExecveV53)
	ExecveTailCallsMapV60 = program.MapBuilderPin("execve_calls", "execve_calls", ExecveV60)

	/* Policy maps populated from base programs */
	NamesMap    = program.MapBuilder("names_map", Execve)
	NamesMapV53 = program.MapBuilder("names_map", ExecveV53)
	NamesMapV60 = program.MapBuilder("names_map", ExecveV60)

	/* Tetragon runtime configuration */
	TetragonConfMap    = program.MapBuilder("tg_conf_map", Execve)
	TetragonConfMapV53 = program.MapBuilder("tg_conf_map", ExecveV53)
	TetragonConfMapV60 = program.MapBuilder("tg_conf_map", ExecveV60)

	/* Internal statistics for debugging */
	ExecveStats    = program.MapBuilder("execve_map_stats", Execve)
	ExecveStatsV53 = program.MapBuilder("execve_map_stats", ExecveV53)
	ExecveStatsV60 = program.MapBuilder("execve_map_stats", ExecveV60)
)

Functions

func GetDefaultMaps

func GetDefaultMaps() []*program.Map

func GetDefaultPrograms

func GetDefaultPrograms() []*program.Program

func GetExecveMap

func GetExecveMap() *program.Map

func GetExecveMapStats

func GetExecveMapStats() *program.Map

func GetInitialSensor

func GetInitialSensor() *sensors.Sensor

GetInitialSensor returns the base sensor

func GetTetragonConfMap

func GetTetragonConfMap() *program.Map