search

lockc-project / lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)
https://lockc-project.github.io/
Apache License 2.0
218 stars 19 forks source link

Use inodes in open_audit eBPF program #141

Open vadorovsky opened 2 years ago

vadorovsky commented 2 years ago

For now we are using hash maps with strings to specify path prefixes, from which we can (or cannot) access files:

https://github.com/rancher-sandbox/lockc/blob/05a94fae2396fbb1ae737df148f402cd3389018b/lockc/src/bpf/maps.h#L67-L113