extractors

Documentation

Index

• func DefaultHostMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)
• func DefaultMetadataExtractor(info *types.ContainerJSON) (*policy.PURuntime, error)
• func ProcessInfo(pid int32) []string
• func SystemdEventMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)
• func UIDMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)
• type DockerMetadataExtractor
  • func NewExternalExtractor(filePath string) (DockerMetadataExtractor, error)
• type EventMetadataExtractor
• type LinuxMetadataExtractorType

Functions

func DefaultHostMetadataExtractor

func DefaultHostMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)

DefaultHostMetadataExtractor is a host specific metadata extractor

func DefaultMetadataExtractor

func DefaultMetadataExtractor(info *types.ContainerJSON) (*policy.PURuntime, error)

DefaultMetadataExtractor is the default metadata extractor for Docker

func ProcessInfo

func ProcessInfo(pid int32) []string

ProcessInfo returns all metadata captured by a process

func SystemdEventMetadataExtractor

func SystemdEventMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)

SystemdEventMetadataExtractor is a systemd based metadata extractor

func UIDMetadataExtractor

func UIDMetadataExtractor(event *common.EventInfo) (*policy.PURuntime, error)

UIDMetadataExtractor is a metadata extractor for uid/gid.

Types

type DockerMetadataExtractor

type DockerMetadataExtractor func(*types.ContainerJSON) (*policy.PURuntime, error)

A DockerMetadataExtractor is a function used to extract a *policy.PURuntime from a given docker ContainerJSON.

func NewExternalExtractor

func NewExternalExtractor(filePath string) (DockerMetadataExtractor, error)

NewExternalExtractor returns a new bash metadata extractor for Docker that will call the executable given in parameter and will generate a Policy Runtime as standard output The format of Input/Output of the executable are in standard JSON.

type EventMetadataExtractor

type EventMetadataExtractor func(*common.EventInfo) (*policy.PURuntime, error)

EventMetadataExtractor is a function used to extract a *policy.PURuntime from a given EventInfo. The EventInfo is generic and is provided over the RPC interface

type LinuxMetadataExtractorType

type LinuxMetadataExtractorType func(event *common.EventInfo) (*policy.PURuntime, error)

LinuxMetadataExtractorType is a type of Linux metadata extractors