base

Documentation

Index

• Variables
• func ApplyExtensions(s *sensors.Sensor) *sensors.Sensor
• func GetDefaultMaps() []*program.Map
• func GetDefaultPrograms() []*program.Program
• func GetExecveMap() *program.Map
• func GetExecveMapStats() *program.Map
• func GetTetragonConfMap() *program.Map
• func IsExecve(p *program.Program) bool
• func IsExit(p *program.Program) bool
• func IsFork(p *program.Program) bool
• func RegisterExtensionAtInit(name string, fn ExtensionFn)
• type ExtensionFn

Variables

var (
	Execve = program.Builder(
		config.ExecObj(),
		"sched/sched_process_exec",
		"tracepoint/sys_execve",
		"event_execve",
		"execve",
	).SetPolicy(basePolicy)

	ExecveBprmCommit = program.Builder(
		"bpf_execve_bprm_commit_creds.o",
		"security_bprm_committing_creds",
		"kprobe/security_bprm_committing_creds",
		"tg_kp_bprm_committing_creds",
		"kprobe",
	).SetPolicy(basePolicy)

	Exit = program.Builder(
		"bpf_exit.o",
		"acct_process",
		"kprobe/acct_process",
		"event_exit",
		"kprobe",
	).SetPolicy(basePolicy)

	Fork = program.Builder(
		"bpf_fork.o",
		"wake_up_new_task",
		"kprobe/wake_up_new_task",
		"kprobe_pid_clear",
		"kprobe",
	).SetPolicy(basePolicy)

	/* Event Ring map */
	TCPMonMap = program.MapBuilder("tcpmon_map", Execve)
	/* Networking and Process Monitoring maps */
	ExecveMap          = program.MapBuilder("execve_map", Execve)
	ExecveTailCallsMap = program.MapBuilderProgram("execve_calls", Execve)

	ExecveJoinMap = program.MapBuilder("tg_execve_joined_info_map", ExecveBprmCommit)

	/* Tetragon runtime configuration */
	TetragonConfMap = program.MapBuilder("tg_conf_map", Execve)

	/* Internal statistics for debugging */
	ExecveStats        = program.MapBuilder("execve_map_stats", Execve)
	ExecveJoinMapStats = program.MapBuilder("tg_execve_joined_info_map_stats", ExecveBprmCommit)
	StatsMap           = program.MapBuilder("tg_stats_map", Execve)

	MatchBinariesSetMap = program.MapBuilder(mbset.MapName, Execve)

	ErrMetricsMap = program.MapBuilder(errmetrics.MapName, Execve)
)

var (
	// GetInitialSensor returns the base sensor
	GetInitialSensor     = sync.OnceValue(initBaseSensor)
	GetInitialSensorTest = initBaseSensorFn()
)

Functions

func ApplyExtensions

func ApplyExtensions(s *sensors.Sensor) *sensors.Sensor

func GetDefaultMaps

func GetDefaultMaps() []*program.Map

func GetDefaultPrograms

func GetDefaultPrograms() []*program.Program

func GetExecveMap

func GetExecveMap() *program.Map

func GetExecveMapStats

func GetExecveMapStats() *program.Map

func GetTetragonConfMap

func GetTetragonConfMap() *program.Map

func IsExecve

func IsExecve(p *program.Program) bool

IsExecve returns true if this is a base execve program

func IsExit

func IsExit(p *program.Program) bool

func IsFork

func IsFork(p *program.Program) bool

func RegisterExtensionAtInit

func RegisterExtensionAtInit(name string, fn ExtensionFn)

Types

type ExtensionFn

type ExtensionFn func(base *sensors.Sensor) (*sensors.Sensor, error)