Documentation
¶
Index ¶
Constants ¶
View Source
const ( MaxPathLen = 256 MaxCommLen = 16 )
These constants need to match the C version
View Source
const EVENT_TYPE_EXEC = 1
View Source
const EVENT_TYPE_OPEN = 2
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Event ¶
type Event struct {
Pid uint32
Ppid uint32
Dirfd int32
Comm [MaxCommLen]byte
Filename [MaxPathLen]byte
Type uint8
}
Event matches the C structure
type TraceCommandResult ¶
type TraceCommandResult struct {
FilesOpened []string
FilesExecuted []string
Start time.Time
Stop time.Time
}
func TraceCommand ¶
func TraceCommand(args []string, downgradeToUser string) (*TraceCommandResult, error)
Source Files
Click to show internal directories.
Click to hide internal directories.