SeaBee
Loading...
Searching...
No Matches
Data Structures | Enumerations
logging_types.h File Reference
#include "constants.h"
Include dependency graph for logging_types.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  log_hdr
 Header attached to every log message. More...
 
struct  generic_msg_log
 Generic log with a message field. More...
 
struct  sb_umount_log
 Log a sb_umount() syscall. More...
 
struct  bpf_map_log
 Log for a eBPF map access via a bpf() syscall. More...
 
struct  task_kill_log
 Log a task_kill() LSM hook event. More...
 
struct  kernel_module_request_log
 Log for a kernel_module_request() LSM hook event. More...
 
struct  kernel_read_file_log
 Log for a kernel_read_file() LSM hook event. More...
 
struct  kernel_load_data_log
 Log for a kernel_load_data() LSM hook event. More...
 
struct  ptrace_access_check_log
 Log for a ptrace_access_check() LSM hook event. More...
 
struct  inode_access_log
 Log for various events that access a dentry or and inode(file_open, inode_permission) More...
 

Enumerations

enum  LogLevel {
  LOG_LEVEL_OFF = 0 , LOG_LEVEL_ERROR = 1 , LOG_LEVEL_WARN = 2 , LOG_LEVEL_INFO = 3 ,
  LOG_LEVEL_DEBUG = 4 , LOG_LEVEL_TRACE = 5
}
 Standard log levels indicating the severity of the message. More...
 
enum  LogReason {
  LOG_REASON_UNKNOWN = 0 , LOG_REASON_ALLOW , LOG_REASON_AUDIT , LOG_REASON_DENY ,
  LOG_REASON_DEBUG , LOG_REASON_ERROR
}
 Standard reasons as to why a log is being output. More...
 
enum  EventType {
  EVENT_TYPE_UNKNOWN = 0 , EVENT_TYPE_MSG , EVENT_TYPE_UNIX_STREAM_CONNECT , EVENT_TYPE_SB_UMOUNT ,
  EVENT_TYPE_BPF_MAP , EVENT_TYPE_TASK_KILL , EVENT_TYPE_KERNEL_MODULE_REQUEST , EVENT_TYPE_KERNEL_READ_FILE ,
  EVENT_TYPE_KERNEL_LOAD_DATA , EVENT_TYPE_PTRACE_ACCESS_CHECK , EVENT_TYPE_BPF_WRITE_USER , EVENT_TYPE_TASK_ALLOC ,
  EVENT_TYPE_FILE_ACCESS
}
 The link between a program's log structure and the logging system. More...
 
enum  InodeAction {
  INODE_ACTION_UNKNOWN = 0 , FILE_OPEN , INODE_PERMISSION , INODE_UNLINK ,
  INODE_RMDIR , INODE_RENAME , INODE_SETATTR , INODE_SETXATTR
}
 Identifies a type of action taken on an inode.
 

Detailed Description

shared types for which rust bindings are generated

Enumeration Type Documentation

◆ EventType

enum EventType

The link between a program's log structure and the logging system.

Each program's log struct will be named here and referred to in the log_hdr structure to give the logging system an idea as to what C binding structure to use when decoding the bytes from the ringbuf.

◆ LogLevel

enum LogLevel

Standard log levels indicating the severity of the message.

LOG_LEVEL_ERROR will always be printed out whereas LOG_LEVEL_TRACE has the lowest priority. The logging system will only submit logs at or above the level specified in the log_level defined the seabee.bpf.c file.

◆ LogReason

enum LogReason

Standard reasons as to why a log is being output.

This is separate from log level and gives additional context that a program can choose depending on what action is being performed.