tetragon
tetragon copied to clipboard
feat: Username for process_exec events
Username is useful when tetragon works on host. On different hosts the same username can have different UIDs.
Approach based on resolving username with pure Go os/user
LGTM. But there is some restrictions:
-
/etc/passwd
is available - tetragon agent and process for which UID is resolved are in the same mount/user namespace
TODO:
- [x] Check if tetragon agent and process for which UID is resolved are in the same mount/user namespace
- [x] Username resolving by a flag (maybe?) // I think flag is not needed.
- [x] Test // Add username check in TestEventExecve
- [x] Docs // Field description exists in reference. Maybe we need to find some place in docs to describe restrictions of username resolving
Deploy Preview for tetragon ready!
Name | Link |
---|---|
Latest commit | 465f368a1f71dc4a9ca4f5443bbd093934227534 |
Latest deploy log | https://app.netlify.com/sites/tetragon/deploys/664346fd1f20980008b831da |
Deploy Preview | https://deploy-preview-2369--tetragon.netlify.app |
Preview on mobile | Toggle QR Code...Use your smartphone camera to open QR code link. |
To edit notification comments on pull requests, go to your Netlify site configuration.
@jrfastab, please, have a look. I think the PR is ready.
hi :wave: sorry for the delay I'm going to look at it in more detail tomorrow quick scan looks good to me.
@tixxdz , please, have a look. I think PR is ready:).
The CI failures seem unrelated