caps

func AreSubset ¶ added in v1.1.0

func AreSubset(a uint64, set uint64) bool

AreSubset() Checks if "a" is a subset of "set" Rerturns true if all "a" capabilities are also in "set", otherwise false.

func GetCapabilities ¶

func GetCapabilities(capInt uint64) string

func GetCapabilitiesHex ¶ added in v1.1.0

func GetCapabilitiesHex(capInt uint64) string

func GetCapabilitiesTypes ¶

func GetCapabilitiesTypes(capInt uint64) []tetragon.CapabilitiesType

func GetCapability ¶ added in v0.8.3

func GetCapability(capInt int32) (string, error)

func GetCapsFullSet ¶ added in v1.1.0

func GetCapsFullSet() uint64

GetCapsFullSet() Returns up to date (go unix library) full set.

func GetCurrentCapabilities ¶

func GetCurrentCapabilities() *tetragon.Capabilities

func GetLastCap ¶ added in v1.1.0

func GetLastCap() int32

GetLastCap() Returns unix.CAP_LAST_CAP unless the kernel defines another last cap which is the case for old kernels.

func GetMsgCapabilities ¶

func GetMsgCapabilities(caps processapi.MsgCapabilities) *tetragon.Capabilities

func GetPIDCaps ¶

func GetPIDCaps(filename string) (uint32, uint64, uint64, uint64)

func GetPrivilegesChangedReasons ¶ added in v1.1.0

func GetPrivilegesChangedReasons(reasons uint32) []tetragon.ProcessPrivilegesChanged

func GetSecureBitsTypes ¶ added in v0.11.0

func GetSecureBitsTypes(secBit uint32) []tetragon.SecureBitsType