Merge pull request #136 from willfindlay/will-dev

Introduce LSM probes and enforcement
willfindlay · Aug 4, 2020 · 6f58f1a · 6f58f1a
2 parents d8fb9d1 + 9be10be
commit 6f58f1a
Show file tree

Hide file tree

Showing 14 changed files with 915 additions and 145 deletions.
diff --git a/Makefile b/Makefile
@@ -16,4 +16,4 @@ systemd:
 	sudo su -c "/bin/sh systemd/create_service.sh"
 
 test: dev
-	$(MAKE) -C tests
+	sudo su -c "$(MAKE) -C tests"
diff --git a/bin/ebph b/bin/ebph
@@ -165,6 +165,7 @@ def parse_args(sys_args: List[str]):
         'normal-factor-den': EBPH_SETTINGS.NORMAL_FACTOR_DEN,
         'anomaly-limit': EBPH_SETTINGS.ANOMALY_LIMIT,
         'tolerize-limit': EBPH_SETTINGS.TOLERIZE_LIMIT,
+        'enforcing': EBPH_SETTINGS.ENFORCING,
     }
 
     _set.add_argument(

diff --git a/ebph/api.py b/ebph/api.py
@@ -92,6 +92,7 @@ def get_status() -> Dict:
                     'ebpH Version': __version__,
                     'Monitoring': bool(API.bpf_program.get_setting(EBPH_SETTINGS.MONITORING)),
                     'Logging New Seq': bool(API.bpf_program.get_setting(EBPH_SETTINGS.LOG_SEQUENCES)),
+                    'Enforcing': bool(API.bpf_program.get_setting(EBPH_SETTINGS.ENFORCING)),
                     'Profiles': f'{num_profiles} ({num_training} training ({num_frozen} frozen), {num_normal} normal)',
                     'Processes': f'{num_processes} ({num_threads} threads)',
                     'Normal Wait': ns_to_delta_str(API.bpf_program.get_setting(EBPH_SETTINGS.NORMAL_WAIT)),