permissions

Documentation

Index

• Constants
• Variables
• func NewHookManager(pm *PermissionsManager) (*hookManager, error)
• type Access
• type AccessMetadata
  • func (s *AccessMetadata) ToJSON() (string, error)
• type Config
  • func NewConfigFromData(data []byte) (*Config, error)
• type Frame
• type PermissionManagerCb
• type PermissionsManager
  • func NewPermissionManagerFromData(data []byte, cb PermissionManagerCb) (*PermissionsManager, error)
  • func NewPermissionManagerFromFile(file string, cb PermissionManagerCb) (*PermissionsManager, error)
  • func (pm *PermissionsManager) OnAccess(key string, matches permMatches, resType ResourceType, req Access) error
• type ResourceType

Constants

const (
	PolicyDefaultDisallow policy = iota
	PolicyDefaultAllow
)

Variables

var (
	Times   [5000]int64
	Times_c = 0
)

Temp for printing.

var ErrPermissionManagerViolation = errors.New("permission manager violation")

Functions

func NewHookManager

func NewHookManager(pm *PermissionsManager) (*hookManager, error)

Types

type Access

type Access int

const (
	AccessWrite Access = 1
	AccessRead  Access = 2
	AccessExec  Access = 4
	AccessNone  Access = 0
)

type AccessMetadata

type AccessMetadata struct {
	DirectPkg string       `json:"direct"`
	CallerPkg string       `json:"caller"`
	ResType   ResourceType `json:"resourceType"`
	ResName   string       `json:"resourceName"`
	Access    Access       `json:"access"`
	Trace     []Frame      `json:"frames"`
	// contains filtered or unexported fields
}

func (*AccessMetadata) ToJSON

func (s *AccessMetadata) ToJSON() (string, error)

type Config

type Config struct {
	Version     *int    `yaml:"version"`
	Default     *policy `yaml:"default"`
	Permissions *perms  `yaml:"permissions"`
}

func NewConfigFromData

func NewConfigFromData(data []byte) (*Config, error)

type Frame

type Frame struct {
	Function string `json:"function"`
	Pkg      string `json:"package"`
}

type PermissionManagerCb

type PermissionManagerCb interface {
	OnAccessDenied(s *AccessMetadata) error
	OnAccessGranted(s *AccessMetadata)
}

type PermissionsManager

type PermissionsManager struct {
	// contains filtered or unexported fields
}

func NewPermissionManagerFromData

func NewPermissionManagerFromData(data []byte, cb PermissionManagerCb) (*PermissionsManager, error)

func NewPermissionManagerFromFile

func NewPermissionManagerFromFile(file string, cb PermissionManagerCb) (*PermissionsManager, error)

func (*PermissionsManager) OnAccess

func (pm *PermissionsManager) OnAccess(key string, matches permMatches, resType ResourceType, req Access) error

TODO: callback

type ResourceType

type ResourceType int

const (
	ResourceTypeEnv ResourceType = iota
	ResourceTypeFs
	ResourceTypeNet
	// ResourceTypeRpc
	ResourceTypeProcess
)