audit

package
v0.2.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 22, 2026 License: AGPL-3.0 Imports: 5 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var KnownGoodProcesses = map[string]string{}/* 273 elements not displayed */

Functions

This section is empty.

Types

type Baseline

type Baseline struct {
	Processes map[string]bool `json:"processes"`
}

func NewBaseline

func NewBaseline() *Baseline

func (*Baseline) Add

func (b *Baseline) Add(name string)

func (*Baseline) BuildFromCurrent

func (b *Baseline) BuildFromCurrent(procs []system.ProcessInfo)

func (*Baseline) IsKnown

func (b *Baseline) IsKnown(name string) bool

func (*Baseline) Load

func (b *Baseline) Load(path string) error

func (*Baseline) Remove

func (b *Baseline) Remove(name string)

func (*Baseline) Save

func (b *Baseline) Save(path string) error

type Finding

type Finding struct {
	Type     FindingType
	Severity Severity
	PID      int
	Name     string
	Message  string
	Detail   string
}

type FindingType

type FindingType string
const (
	FindingZombie       FindingType = "zombie"
	FindingOrphan       FindingType = "orphan"
	FindingDaemon       FindingType = "daemon"
	FindingKernelThread FindingType = "kthread"
	FindingGPUShadow    FindingType = "gpushadow"
	FindingMemoryLeak   FindingType = "memleak"
	FindingUnknownSvc   FindingType = "unknown"
)

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

func NewScanner

func NewScanner(baseline *Baseline) *Scanner

func (*Scanner) ScanAll

func (s *Scanner) ScanAll(
	procs []system.ProcessInfo,
	gpuProcs []system.GPUProcess,
) []Finding

func (*Scanner) ScanDaemons

func (s *Scanner) ScanDaemons(procs []system.ProcessInfo) []Finding

func (*Scanner) ScanGPUShadows

func (s *Scanner) ScanGPUShadows(
	procs []system.ProcessInfo,
	gpuProcs []system.GPUProcess,
) []Finding

func (*Scanner) ScanKernelThreads

func (s *Scanner) ScanKernelThreads(procs []system.ProcessInfo) []Finding

func (*Scanner) ScanMemoryLeaks

func (s *Scanner) ScanMemoryLeaks(
	procs []system.ProcessInfo,
	history map[int][]uint64,
) []Finding

func (*Scanner) ScanOrphans

func (s *Scanner) ScanOrphans(procs []system.ProcessInfo) []Finding

func (*Scanner) ScanZombies

func (s *Scanner) ScanZombies(procs []system.ProcessInfo) []Finding

type Severity

type Severity string
const (
	SeverityOK   Severity = "OK"
	SeverityWarn Severity = "WARN"
	SeverityCrit Severity = "CRIT"
)

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL