Documentation
¶
Index ¶
- Constants
- func CollectCryptStorageHint() *payload.CryptStorageHint
- func CollectFileIntegrityTooling() *payload.FileIntegrityTooling
- func CollectHostDisk() (*payload.HostDisk, string)
- func CollectHostNetwork() (*payload.HostNetwork, string)
- func CollectHostPath() *payload.HostPath
- func CollectHostSuid() *payload.HostSuid
- func CollectMountOptionsAudit() *payload.MountOptionsAudit
- func CollectNfsExportsFingerprint() *payload.NfsExportsFingerprint
- func CollectPathPermissionsAudit() *payload.PathPermissionsAudit
- func CollectUsbStoragePosture() *payload.UsbStoragePosture
Constants ¶
const ModuleName = "file_system_and_storage"
ModuleName identifies this component module.
Variables ¶
This section is empty.
Functions ¶
func CollectCryptStorageHint ¶
func CollectCryptStorageHint() *payload.CryptStorageHint
CollectCryptStorageHint summarizes crypttab and lsblk crypt volumes (no key material).
func CollectFileIntegrityTooling ¶
func CollectFileIntegrityTooling() *payload.FileIntegrityTooling
CollectFileIntegrityTooling detects AIDE/Tripwire-style installation hints (no DB upload).
func CollectHostDisk ¶
CollectHostDisk reports mount usage via gopsutil disk.Partitions(false) + disk.Usage. The second return is non-empty when host disk usage could not be collected (error message for ingest).
func CollectHostNetwork ¶
func CollectHostNetwork() (*payload.HostNetwork, string)
CollectHostNetwork summarizes interfaces and public-IP hints via gopsutil net.Interfaces.
func CollectHostPath ¶
CollectHostPath enumerates PATH directories with exists and world-writable flags (skips dirs under /home).
func CollectHostSuid ¶
CollectHostSuid lists setuid binaries under common roots (bounded). Implemented with filepath.WalkDir (no external find): gopsutil does not expose filesystem setuid enumeration.
func CollectMountOptionsAudit ¶
func CollectMountOptionsAudit() *payload.MountOptionsAudit
CollectMountOptionsAudit parses /etc/fstab and live mounts (gopsutil disk.Partitions) for hardening flags.
func CollectNfsExportsFingerprint ¶
func CollectNfsExportsFingerprint() *payload.NfsExportsFingerprint
CollectNfsExportsFingerprint parses /etc/exports with path hashes (no raw paths).
func CollectPathPermissionsAudit ¶
func CollectPathPermissionsAudit() *payload.PathPermissionsAudit
CollectPathPermissionsAudit samples world-writable dirs, /tmp sticky, SGID files, and unowned paths (bounded).
func CollectUsbStoragePosture ¶
func CollectUsbStoragePosture() *payload.UsbStoragePosture
CollectUsbStoragePosture reports usb_storage load state and modprobe blacklist hints.
Types ¶
This section is empty.
Source Files