flags

package

v0.13.1 Latest Latest Go to latest Published: Apr 6, 2023 License: Apache-2.0 Imports: 23 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/aquasecurity/tracee

Links

Open Source Insights

Documentation ¶

Index ¶

func CreatePolicies(filterMap FilterMap) (*policy.Policies, error)
func InvalidEventError(event string) error
func InvalidEventExcludeError(event string) error
func InvalidFilterOptionError(expr string) error
func InvalidFlagEmpty() error
func InvalidFlagOperator(expression string) error
func InvalidFlagValue(expression string) error
func InvalidLogOption(opt string) error
func InvalidSetError(set string) error
func PrepareCache(cacheSlice []string) (queue.CacheConfig, error)
func PrepareCapabilities(capsSlice []string) (tracee.CapabilitiesConfig, error)
func PrepareCapture(captureSlice []string) (tracee.CaptureConfig, error)
func PrepareContainers(containerFlags []string) (runtime.Sockets, error)
func PrepareLogger(logOptions []string) (*logger.LoggerConfig, error)
func PrepareRego(regoSlice []string) (rego.Config, error)
func PrintAndExitIfHelp(ctx *cli.Context, newBinary bool)
type FilterMap
- func PrepareFilterMapFromFlags(filtersArr []string) (FilterMap, error)
- func PrepareFilterMapFromPolicies(policies []PolicyFile) (FilterMap, error)
type OutputConfig
- func PrepareOutput(outputSlice []string) (OutputConfig, error)
- func TraceeEbpfPrepareOutput(outputSlice []string) (OutputConfig, error)
type PolicyFile
type Rule

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CreatePolicies ¶ added in v0.13.0

func CreatePolicies(filterMap FilterMap) (*policy.Policies, error)

func InvalidEventError ¶

func InvalidEventError(event string) error

func InvalidEventExcludeError ¶

func InvalidEventExcludeError(event string) error

func InvalidFilterOptionError ¶

func InvalidFilterOptionError(expr string) error

func InvalidFlagEmpty ¶ added in v0.13.0

func InvalidFlagEmpty() error

func InvalidFlagOperator ¶ added in v0.13.0

func InvalidFlagOperator(expression string) error

func InvalidFlagValue ¶ added in v0.13.0

func InvalidFlagValue(expression string) error

func InvalidLogOption ¶ added in v0.11.1

func InvalidLogOption(opt string) error

func InvalidSetError ¶

func InvalidSetError(set string) error

func PrepareCache ¶

func PrepareCache(cacheSlice []string) (queue.CacheConfig, error)

func PrepareCapabilities ¶

func PrepareCapabilities(capsSlice []string) (tracee.CapabilitiesConfig, error)

func PrepareCapture ¶

func PrepareCapture(captureSlice []string) (tracee.CaptureConfig, error)

func PrepareContainers ¶

func PrepareContainers(containerFlags []string) (runtime.Sockets, error)

func PrepareLogger ¶ added in v0.11.0

func PrepareLogger(logOptions []string) (*logger.LoggerConfig, error)

func PrepareRego ¶

func PrepareRego(regoSlice []string) (rego.Config, error)

func PrintAndExitIfHelp ¶

func PrintAndExitIfHelp(ctx *cli.Context, newBinary bool)

Types ¶

type FilterMap ¶ added in v0.13.0

type FilterMap map[int][]*filterFlag

FilterMap holds pre-parsed filter flag fields

func PrepareFilterMapFromFlags ¶ added in v0.13.0

func PrepareFilterMapFromFlags(filtersArr []string) (FilterMap, error)

func PrepareFilterMapFromPolicies ¶ added in v0.13.0

func PrepareFilterMapFromPolicies(policies []PolicyFile) (FilterMap, error)

PrepareFilterMapForPolicies prepares the FilterMap for the policies

type OutputConfig ¶

type OutputConfig struct {
	TraceeConfig   *tracee.OutputConfig
	PrinterConfigs []printer.Config
}

func PrepareOutput ¶

func PrepareOutput(outputSlice []string) (OutputConfig, error)

func TraceeEbpfPrepareOutput ¶ added in v0.12.0

func TraceeEbpfPrepareOutput(outputSlice []string) (OutputConfig, error)

type PolicyFile ¶ added in v0.13.0

type PolicyFile struct {
	Name          string   `yaml:"name"`
	Description   string   `yaml:"description"`
	Scope         []string `yaml:"scope"`
	DefaultAction string   `yaml:"defaultAction"`
	Rules         []Rule   `yaml:"rules"`
}

PolicyFile is the structure of the policy file

type Rule ¶ added in v0.13.0

type Rule struct {
	Event  string   `yaml:"event"`
	Filter []string `yaml:"filter"`
	Action string   `yaml:"action"`
}

Rule is the structure of the rule in the policy file

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
server

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL