|
SeaBee
|
#include "constants.h"

Go to the source code of this file.
Data Structures | |
| struct | log_hdr |
| Header attached to every log message. More... | |
| struct | generic_msg_log |
| Generic log with a message field. More... | |
| struct | sb_umount_log |
| Log a sb_umount() syscall. More... | |
| struct | bpf_map_log |
| Log for a eBPF map access via a bpf() syscall. More... | |
| struct | task_kill_log |
| Log a task_kill() LSM hook event. More... | |
| struct | kernel_module_request_log |
| Log for a kernel_module_request() LSM hook event. More... | |
| struct | kernel_read_file_log |
| Log for a kernel_read_file() LSM hook event. More... | |
| struct | kernel_load_data_log |
| Log for a kernel_load_data() LSM hook event. More... | |
| struct | ptrace_access_check_log |
| Log for a ptrace_access_check() LSM hook event. More... | |
| struct | inode_access_log |
| Log for various events that access a dentry or and inode(file_open, inode_permission) More... | |
Enumerations | |
| enum | LogLevel { LOG_LEVEL_OFF = 0 , LOG_LEVEL_ERROR = 1 , LOG_LEVEL_WARN = 2 , LOG_LEVEL_INFO = 3 , LOG_LEVEL_DEBUG = 4 , LOG_LEVEL_TRACE = 5 } |
| Standard log levels indicating the severity of the message. More... | |
| enum | LogReason { LOG_REASON_UNKNOWN = 0 , LOG_REASON_ALLOW , LOG_REASON_AUDIT , LOG_REASON_DENY , LOG_REASON_DEBUG , LOG_REASON_ERROR } |
| Standard reasons as to why a log is being output. More... | |
| enum | EventType { EVENT_TYPE_UNKNOWN = 0 , EVENT_TYPE_MSG , EVENT_TYPE_UNIX_STREAM_CONNECT , EVENT_TYPE_SB_UMOUNT , EVENT_TYPE_BPF_MAP , EVENT_TYPE_TASK_KILL , EVENT_TYPE_KERNEL_MODULE_REQUEST , EVENT_TYPE_KERNEL_READ_FILE , EVENT_TYPE_KERNEL_LOAD_DATA , EVENT_TYPE_PTRACE_ACCESS_CHECK , EVENT_TYPE_BPF_WRITE_USER , EVENT_TYPE_TASK_ALLOC , EVENT_TYPE_FILE_ACCESS } |
| The link between a program's log structure and the logging system. More... | |
| enum | InodeAction { INODE_ACTION_UNKNOWN = 0 , FILE_OPEN , INODE_PERMISSION , INODE_UNLINK , INODE_RMDIR , INODE_RENAME , INODE_SETATTR , INODE_SETXATTR } |
| Identifies a type of action taken on an inode. | |
shared types for which rust bindings are generated
| enum EventType |
The link between a program's log structure and the logging system.
Each program's log struct will be named here and referred to in the log_hdr structure to give the logging system an idea as to what C binding structure to use when decoding the bytes from the ringbuf.
| enum LogLevel |
Standard log levels indicating the severity of the message.
LOG_LEVEL_ERROR will always be printed out whereas LOG_LEVEL_TRACE has the lowest priority. The logging system will only submit logs at or above the level specified in the log_level defined the seabee.bpf.c file.
| enum LogReason |
Standard reasons as to why a log is being output.
This is separate from log level and gives additional context that a program can choose depending on what action is being performed.