#include <RootGuardEvent.hpp>
Public Attributes | |
| std::string | received_at |
| std::string | event |
| std::string | verdict |
| std::uint32_t | pid {} |
| std::uint32_t | tgid {} |
| std::uint32_t | ppid {} |
| std::uint32_t | old_euid {} |
| std::uint32_t | new_euid {} |
| std::uint32_t | rule_id {} |
| std::uint32_t | reason_flags {} |
| std::int32_t | lsm_flags {} |
| std::uint32_t | auxiliary {} |
| std::uint64_t | device {} |
| std::uint64_t | inode {} |
| std::uint64_t | actor_device {} |
| std::uint64_t | actor_inode {} |
| std::uint64_t | parent_device {} |
| std::uint64_t | parent_inode {} |
| std::uint64_t | actor_start_boottime_ns {} |
| std::uint32_t | old_mode {} |
| std::uint32_t | new_mode {} |
| std::uint32_t | old_uid {} |
| std::uint32_t | new_uid {} |
| std::uint32_t | old_gid {} |
| std::uint32_t | new_gid {} |
| std::string | comm |
| std::string | parent_comm |
| std::string | actor_executable |
| std::string | parent_executable |
| std::string | filename |
| std::string | path_resolution {"basename-only"} |
| std::string | raw_json |
Definition at line 20 of file RootGuardEvent.hpp.
| std::uint64_t BastionGuard::RootGuard::Event::actor_device {} |
Definition at line 35 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::string BastionGuard::RootGuard::Event::actor_executable |
Definition at line 48 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::actor_inode {} |
Definition at line 36 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::actor_start_boottime_ns {} |
Definition at line 39 of file RootGuardEvent.hpp.
| std::uint32_t BastionGuard::RootGuard::Event::auxiliary {} |
Definition at line 32 of file RootGuardEvent.hpp.
| std::string BastionGuard::RootGuard::Event::comm |
Definition at line 46 of file RootGuardEvent.hpp.
Referenced by anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::device {} |
Definition at line 33 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), anonymous_namespace{RootGuardPage.cpp}::incident_detail(), and anonymous_namespace{RootGuardPage.cpp}::incident_key().
| std::string BastionGuard::RootGuard::Event::event |
Definition at line 22 of file RootGuardEvent.hpp.
Referenced by anonymous_namespace{RootGuardPage.cpp}::incident_title(), and anonymous_namespace{RootGuardPage.cpp}::recovery_note().
| std::string BastionGuard::RootGuard::Event::filename |
Definition at line 50 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::inode {} |
Definition at line 34 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), anonymous_namespace{RootGuardPage.cpp}::incident_detail(), and anonymous_namespace{RootGuardPage.cpp}::incident_key().
| std::int32_t BastionGuard::RootGuard::Event::lsm_flags {} |
Definition at line 31 of file RootGuardEvent.hpp.
| std::uint32_t BastionGuard::RootGuard::Event::new_euid {} |
Definition at line 28 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::new_gid {} |
Definition at line 45 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::new_mode {} |
Definition at line 41 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::new_uid {} |
Definition at line 43 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::old_euid {} |
Definition at line 27 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::old_gid {} |
Definition at line 44 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::old_mode {} |
Definition at line 40 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint32_t BastionGuard::RootGuard::Event::old_uid {} |
Definition at line 42 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::string BastionGuard::RootGuard::Event::parent_comm |
Definition at line 47 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::parent_device {} |
Definition at line 37 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event().
| std::string BastionGuard::RootGuard::Event::parent_executable |
Definition at line 49 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event(), and anonymous_namespace{RootGuardPage.cpp}::incident_detail().
| std::uint64_t BastionGuard::RootGuard::Event::parent_inode {} |
Definition at line 38 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event().
| std::string BastionGuard::RootGuard::Event::path_resolution {"basename-only"} |
Definition at line 51 of file RootGuardEvent.hpp.
Referenced by anonymous_namespace{RootGuardPage.cpp}::path_resolution_text().
| std::uint32_t BastionGuard::RootGuard::Event::pid {} |
Definition at line 24 of file RootGuardEvent.hpp.
| std::uint32_t BastionGuard::RootGuard::Event::ppid {} |
Definition at line 26 of file RootGuardEvent.hpp.
| std::string BastionGuard::RootGuard::Event::raw_json |
Definition at line 52 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::parse_event_json().
| std::uint32_t BastionGuard::RootGuard::Event::reason_flags {} |
Definition at line 30 of file RootGuardEvent.hpp.
Referenced by anonymous_namespace{RootGuardPage.cpp}::incident_detail(), anonymous_namespace{RootGuardPage.cpp}::incident_title(), anonymous_namespace{RootGuardPage.cpp}::remove_available(), and anonymous_namespace{RootGuardPage.cpp}::restore_available().
| std::string BastionGuard::RootGuard::Event::received_at |
Definition at line 21 of file RootGuardEvent.hpp.
Referenced by BastionGuard::RootGuard::format_event().
| std::uint32_t BastionGuard::RootGuard::Event::rule_id {} |
| std::uint32_t BastionGuard::RootGuard::Event::tgid {} |
Definition at line 25 of file RootGuardEvent.hpp.
| std::string BastionGuard::RootGuard::Event::verdict |
Definition at line 23 of file RootGuardEvent.hpp.