types

Documentation

Index

• Constants
• type AuditLine
• type ContainerInfo

Constants

const (
	AuditTypeSeccomp  = "seccomp"
	AuditTypeSelinux  = "selinux"
	AuditTypeApparmor = "apparmor"
)

Types

type AuditLine

type AuditLine struct {
	AuditType string

	// common
	ProcessID   int
	TimestampID string

	// seccomp
	SystemCallID int32
	Executable   string

	// selinux
	Scontext string
	Tcontext string
	Tclass   string
	Perm     string

	// apparmor
	Apparmor  string
	Operation string
	// Profile is the name of the AppArmor profile under which the operation took place.
	Profile string
	// Name is what the operation wanted to access.
	Name string
	// ExtraInfo may contain addition information such as:
	// requested_mask, denied_mask, fsuid=65534, ouid and target.
	ExtraInfo string
}

type ContainerInfo

type ContainerInfo struct {
	PodName       string
	ContainerName string
	Namespace     string
	ContainerID   string
	RecordProfile string
}