Documentation
¶
Overview ¶
Package agent holds agent related files
Package agent holds agent related files ¶
Package agent holds agent related files ¶
Package agent holds agent related files
Index ¶
- type ADStorage
- type RSAOptions
- type RuntimeSecurityAgent
- func (rsa *RuntimeSecurityAgent) DispatchActivityDump(msg *api.ActivityDumpStreamMessage)
- func (rsa *RuntimeSecurityAgent) DispatchEvent(evt *api.SecurityEventMessage)
- func (rsa *RuntimeSecurityAgent) SendActivityDumpStream(stream grpc.ClientStreamingServer[api.ActivityDumpStreamMessage, empty.Empty]) error
- func (rsa *RuntimeSecurityAgent) SendEvent(stream grpc.ClientStreamingServer[api.SecurityEventMessage, empty.Empty]) error
- func (rsa *RuntimeSecurityAgent) Start(reporter common.RawReporter, endpoints *config.Endpoints, ...)
- func (rsa *RuntimeSecurityAgent) StatusProvider() status.Provider
- func (rsa *RuntimeSecurityAgent) Stop()
- type RuntimeSecurityCmdClient
- func (c *RuntimeSecurityCmdClient) Close()
- func (c *RuntimeSecurityCmdClient) DumpDiscarders() (string, error)
- func (c *RuntimeSecurityCmdClient) DumpNetworkNamespace(snapshotInterfaces bool) (*api.DumpNetworkNamespaceMessage, error)
- func (c *RuntimeSecurityCmdClient) DumpProcessCache(withArgs bool, format string) (string, error)
- func (c *RuntimeSecurityCmdClient) GenerateActivityDump(request *api.ActivityDumpParams) (*api.ActivityDumpMessage, error)
- func (c *RuntimeSecurityCmdClient) GenerateEncoding(request *api.TranscodingRequestParams) (*api.TranscodingRequestMessage, error)
- func (c *RuntimeSecurityCmdClient) GetConfig() (*api.SecurityConfigMessage, error)
- func (c *RuntimeSecurityCmdClient) GetRuleSetReport() (*api.GetRuleSetReportMessage, error)
- func (c *RuntimeSecurityCmdClient) GetStatus() (*api.Status, error)
- func (c *RuntimeSecurityCmdClient) ListActivityDumps() (*api.ActivityDumpListMessage, error)
- func (c *RuntimeSecurityCmdClient) ListSecurityProfiles(includeCache bool) (*api.SecurityProfileListMessage, error)
- func (c *RuntimeSecurityCmdClient) ReloadPolicies() (*api.ReloadPoliciesResultMessage, error)
- func (c *RuntimeSecurityCmdClient) RunSelfTest() (*api.SecuritySelfTestResultMessage, error)
- func (c *RuntimeSecurityCmdClient) SaveSecurityProfile(name string, tag string) (*api.SecurityProfileSaveMessage, error)
- func (c *RuntimeSecurityCmdClient) StopActivityDump(name, container, cgroup string) (*api.ActivityDumpStopMessage, error)
- type RuntimeSecurityEventClient
- type SecurityModuleCmdClientWrapper
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type ADStorage ¶
type ADStorage interface {
backend.ActivityDumpHandler
SendTelemetry(_ statsd.ClientInterface)
}
ADStorage represents the interface for the activity dump storage
type RSAOptions ¶
type RSAOptions struct {
LogProfiledWorkloads bool
}
RSAOptions represents the runtime security agent options
type RuntimeSecurityAgent ¶
type RuntimeSecurityAgent struct {
// grpc server
api.UnimplementedSecurityAgentAPIServer
// contains filtered or unexported fields
}
RuntimeSecurityAgent represents the main wrapper for the Runtime Security product
func NewRuntimeSecurityAgent ¶
func NewRuntimeSecurityAgent(statsdClient statsd.ClientInterface, hostname string) (*RuntimeSecurityAgent, error)
NewRuntimeSecurityAgent instantiates a new RuntimeSecurityAgent
func StartRuntimeSecurity ¶
func StartRuntimeSecurity(log log.Component, config config.Component, hostname string, stopper startstop.Stopper, statsdClient ddgostatsd.ClientInterface, compression compression.Component) (*RuntimeSecurityAgent, error)
StartRuntimeSecurity starts runtime security
func (*RuntimeSecurityAgent) DispatchActivityDump ¶
func (rsa *RuntimeSecurityAgent) DispatchActivityDump(msg *api.ActivityDumpStreamMessage)
DispatchActivityDump forwards an activity dump message to the backend
func (*RuntimeSecurityAgent) DispatchEvent ¶
func (rsa *RuntimeSecurityAgent) DispatchEvent(evt *api.SecurityEventMessage)
DispatchEvent dispatches a security event message to the subsytems of the runtime security agent
func (*RuntimeSecurityAgent) SendActivityDumpStream ¶
func (rsa *RuntimeSecurityAgent) SendActivityDumpStream(stream grpc.ClientStreamingServer[api.ActivityDumpStreamMessage, empty.Empty]) error
SendActivityDumpStream dispatches activity dumps to the backend
func (*RuntimeSecurityAgent) SendEvent ¶
func (rsa *RuntimeSecurityAgent) SendEvent(stream grpc.ClientStreamingServer[api.SecurityEventMessage, empty.Empty]) error
SendEvent dispatches events to the backend
func (*RuntimeSecurityAgent) Start ¶
func (rsa *RuntimeSecurityAgent) Start(reporter common.RawReporter, endpoints *config.Endpoints, secInfoReporter common.RawReporter, secInfoEndpoints *config.Endpoints)
Start the runtime security agent
func (*RuntimeSecurityAgent) StatusProvider ¶
func (rsa *RuntimeSecurityAgent) StatusProvider() status.Provider
StatusProvider returns the runtime security agent status provider
func (*RuntimeSecurityAgent) Stop ¶
func (rsa *RuntimeSecurityAgent) Stop()
Stop the runtime recurity agent
type RuntimeSecurityCmdClient ¶
type RuntimeSecurityCmdClient struct {
// contains filtered or unexported fields
}
RuntimeSecurityCmdClient is used to send request to security module
func NewRuntimeSecurityCmdClient ¶
func NewRuntimeSecurityCmdClient() (*RuntimeSecurityCmdClient, error)
NewRuntimeSecurityCmdClient instantiates a new RuntimeSecurityCmdClient
func (*RuntimeSecurityCmdClient) Close ¶
func (c *RuntimeSecurityCmdClient) Close()
Close closes the connection
func (*RuntimeSecurityCmdClient) DumpDiscarders ¶
func (c *RuntimeSecurityCmdClient) DumpDiscarders() (string, error)
DumpDiscarders sends a request to dump discarders
func (*RuntimeSecurityCmdClient) DumpNetworkNamespace ¶
func (c *RuntimeSecurityCmdClient) DumpNetworkNamespace(snapshotInterfaces bool) (*api.DumpNetworkNamespaceMessage, error)
DumpNetworkNamespace sends a network namespace cache dump request
func (*RuntimeSecurityCmdClient) DumpProcessCache ¶
func (c *RuntimeSecurityCmdClient) DumpProcessCache(withArgs bool, format string) (string, error)
DumpProcessCache sends a process cache dump request
func (*RuntimeSecurityCmdClient) GenerateActivityDump ¶
func (c *RuntimeSecurityCmdClient) GenerateActivityDump(request *api.ActivityDumpParams) (*api.ActivityDumpMessage, error)
GenerateActivityDump send a dump activity request
func (*RuntimeSecurityCmdClient) GenerateEncoding ¶
func (c *RuntimeSecurityCmdClient) GenerateEncoding(request *api.TranscodingRequestParams) (*api.TranscodingRequestMessage, error)
GenerateEncoding sends a transcoding request
func (*RuntimeSecurityCmdClient) GetConfig ¶
func (c *RuntimeSecurityCmdClient) GetConfig() (*api.SecurityConfigMessage, error)
GetConfig retrieves the config of the runtime security module
func (*RuntimeSecurityCmdClient) GetRuleSetReport ¶
func (c *RuntimeSecurityCmdClient) GetRuleSetReport() (*api.GetRuleSetReportMessage, error)
GetRuleSetReport gets the currently ruleset loaded status
func (*RuntimeSecurityCmdClient) GetStatus ¶
func (c *RuntimeSecurityCmdClient) GetStatus() (*api.Status, error)
GetStatus returns the status of the module
func (*RuntimeSecurityCmdClient) ListActivityDumps ¶
func (c *RuntimeSecurityCmdClient) ListActivityDumps() (*api.ActivityDumpListMessage, error)
ListActivityDumps lists the active activity dumps
func (*RuntimeSecurityCmdClient) ListSecurityProfiles ¶
func (c *RuntimeSecurityCmdClient) ListSecurityProfiles(includeCache bool) (*api.SecurityProfileListMessage, error)
ListSecurityProfiles lists the profiles held in memory by the Security Profile manager
func (*RuntimeSecurityCmdClient) ReloadPolicies ¶
func (c *RuntimeSecurityCmdClient) ReloadPolicies() (*api.ReloadPoliciesResultMessage, error)
ReloadPolicies instructs the system probe to reload its policies
func (*RuntimeSecurityCmdClient) RunSelfTest ¶
func (c *RuntimeSecurityCmdClient) RunSelfTest() (*api.SecuritySelfTestResultMessage, error)
RunSelfTest instructs the system probe to run a self test
func (*RuntimeSecurityCmdClient) SaveSecurityProfile ¶
func (c *RuntimeSecurityCmdClient) SaveSecurityProfile(name string, tag string) (*api.SecurityProfileSaveMessage, error)
SaveSecurityProfile saves the requested security profile to disk
func (*RuntimeSecurityCmdClient) StopActivityDump ¶
func (c *RuntimeSecurityCmdClient) StopActivityDump(name, container, cgroup string) (*api.ActivityDumpStopMessage, error)
StopActivityDump stops an active dump if it exists
type RuntimeSecurityEventClient ¶
type RuntimeSecurityEventClient struct {
// contains filtered or unexported fields
}
RuntimeSecurityEventClient is used to send request to security module
func NewRuntimeSecurityEventClient ¶
func NewRuntimeSecurityEventClient() (*RuntimeSecurityEventClient, error)
NewRuntimeSecurityEventClient instantiates a new RuntimeSecurityEventClient
func (*RuntimeSecurityEventClient) Close ¶
func (c *RuntimeSecurityEventClient) Close()
Close closes the connection
func (*RuntimeSecurityEventClient) GetActivityDumpStream ¶
func (c *RuntimeSecurityEventClient) GetActivityDumpStream() (api.SecurityModuleEvent_GetActivityDumpStreamClient, error)
GetActivityDumpStream returns a stream of activity dumps. Communication security-agent -> system-probe
func (*RuntimeSecurityEventClient) GetEventStream ¶
func (c *RuntimeSecurityEventClient) GetEventStream() (api.SecurityModuleEvent_GetEventStreamClient, error)
GetEventStream returns a stream of events. Communication security-agent -> system-probe
type SecurityModuleCmdClientWrapper ¶
type SecurityModuleCmdClientWrapper interface {
DumpDiscarders() (string, error)
DumpProcessCache(withArgs bool, format string) (string, error)
GenerateActivityDump(request *api.ActivityDumpParams) (*api.ActivityDumpMessage, error)
ListActivityDumps() (*api.ActivityDumpListMessage, error)
StopActivityDump(name, container, cgroup string) (*api.ActivityDumpStopMessage, error)
GenerateEncoding(request *api.TranscodingRequestParams) (*api.TranscodingRequestMessage, error)
DumpNetworkNamespace(snapshotInterfaces bool) (*api.DumpNetworkNamespaceMessage, error)
GetConfig() (*api.SecurityConfigMessage, error)
GetStatus() (*api.Status, error)
RunSelfTest() (*api.SecuritySelfTestResultMessage, error)
ReloadPolicies() (*api.ReloadPoliciesResultMessage, error)
GetRuleSetReport() (*api.GetRuleSetReportMessage, error)
ListSecurityProfiles(includeCache bool) (*api.SecurityProfileListMessage, error)
SaveSecurityProfile(name string, tag string) (*api.SecurityProfileSaveMessage, error)
Close()
}
SecurityModuleCmdClientWrapper represents a security module client
Source Files
Directories