Documentation
¶
Index ¶
- Constants
- func CollectCryptStorageHint(ctx context.Context) *payload.CryptStorageHint
- func CollectFileIntegrityTooling(ctx context.Context) *payload.FileIntegrityTooling
- func CollectHostDisk(ctx context.Context) *payload.HostDisk
- func CollectHostNetwork(ctx context.Context) *payload.HostNetwork
- func CollectHostPath(ctx context.Context) *payload.HostPath
- func CollectHostSuid(ctx context.Context) *payload.HostSuid
- func CollectMountOptionsAudit(ctx context.Context) *payload.MountOptionsAudit
- func CollectNfsExportsFingerprint(ctx context.Context) *payload.NfsExportsFingerprint
- func CollectPathPermissionsAudit(ctx context.Context) *payload.PathPermissionsAudit
- func CollectUsbStoragePosture(ctx context.Context) *payload.UsbStoragePosture
Constants ¶
const ModuleName = "file_system_and_storage"
ModuleName identifies this component module.
Variables ¶
This section is empty.
Functions ¶
func CollectCryptStorageHint ¶
func CollectCryptStorageHint(ctx context.Context) *payload.CryptStorageHint
CollectCryptStorageHint summarizes crypttab and lsblk crypt volumes (no key material).
func CollectFileIntegrityTooling ¶
func CollectFileIntegrityTooling(ctx context.Context) *payload.FileIntegrityTooling
CollectFileIntegrityTooling detects AIDE/Tripwire-style installation hints (no DB upload).
func CollectHostDisk ¶
CollectHostDisk reports mount usage via gopsutil disk.Partitions(false) + disk.Usage.
func CollectHostNetwork ¶
func CollectHostNetwork(ctx context.Context) *payload.HostNetwork
CollectHostNetwork summarizes interfaces and public-IP hints via gopsutil net.Interfaces.
func CollectHostPath ¶
CollectHostPath enumerates PATH directories with exists and world-writable flags (skips dirs under /home).
func CollectHostSuid ¶
CollectHostSuid lists setuid binaries under common roots (bounded). Implemented with filepath.WalkDir (no external find): gopsutil does not expose filesystem setuid enumeration.
func CollectMountOptionsAudit ¶
func CollectMountOptionsAudit(ctx context.Context) *payload.MountOptionsAudit
CollectMountOptionsAudit parses /etc/fstab and live mounts (gopsutil disk.Partitions) for hardening flags.
func CollectNfsExportsFingerprint ¶
func CollectNfsExportsFingerprint(ctx context.Context) *payload.NfsExportsFingerprint
CollectNfsExportsFingerprint parses /etc/exports with path hashes (no raw paths).
func CollectPathPermissionsAudit ¶
func CollectPathPermissionsAudit(ctx context.Context) *payload.PathPermissionsAudit
CollectPathPermissionsAudit samples world-writable dirs, /tmp sticky, SGID files, and unowned paths (bounded).
func CollectUsbStoragePosture ¶
func CollectUsbStoragePosture(ctx context.Context) *payload.UsbStoragePosture
CollectUsbStoragePosture reports usb_storage load state and modprobe blacklist hints.
Types ¶
This section is empty.
Source Files