Commit graph

178561 commits

Author SHA1 Message Date
Gerard Wagener
3fd629f6f3 Try #1: Integrate process tree analysis in aha
Problem: Exceptions are thrown: Need to distinguish between message types
2010-01-15 10:20:47 +01:00
Gerard Wagener
5117feb142 Reassemble process trees
Check if a process belongs to the system or a user
2010-01-15 09:55:26 +01:00
Gerard Wagener
defd699bd8 Add idea to implement signal handler to flush the file 2010-01-14 15:49:51 +01:00
Gerard Wagener
9a996274ef Put unique filename / message name in logs for replay 2010-01-14 15:39:58 +01:00
Gerard Wagener
ca75ba0ac5 Removed temp printk 2010-01-14 15:09:42 +01:00
Gerard Wagener
6c86c14a9b Set message types for differentiating between clone and execve messages 2010-01-14 15:04:16 +01:00
Gerard Wagener
a644bbe929 Try #1: Bug fix for the buffers 2010-01-14 14:38:46 +01:00
Gerard Wagener
1e178854a5 This version has a major bugs with buffer sizes due to failed
inline optimizations my fault :-(
2010-01-14 11:50:14 +01:00
Gerard Wagener
41edea30d9 Found another place where forks should be investigated 2010-01-12 19:21:35 +01:00
Gerard Wagener
71d68f1386 Found the place where clones can be traced 2010-01-12 18:14:01 +01:00
Gerard Wagener
165804ff13 Updated config file for the current development version 2010-01-12 17:50:10 +01:00
Gerard Wagener
ad8a82b369 aha.py gets parameters from config file 2010-01-12 17:07:41 +01:00
Gerard Wagener
b07b91ce18 Do not used printk but PRINTK macro that can be enabled / disabled 2010-01-12 16:49:22 +01:00
Gerard Wagener
d0fa66220d Add description for internal function 2010-01-12 16:40:05 +01:00
Gerard Wagener
3ec5e63ca7 Add some logging information if file write failed 2010-01-12 16:38:44 +01:00
Gerard Wagener
f8929ed150 Tried to split up the code 2010-01-12 16:35:11 +01:00
Gerard Wagener
2f50e920ff Add new shared header file 2010-01-12 14:17:27 +01:00
Gerard Wagener
c429e39943 Version that compiles where aha code was moved to aha.c 2010-01-12 14:10:47 +01:00
Gerard Wagener
0c1d3789ba Removed aha.h out of the main include directory 2010-01-12 13:46:44 +01:00
Gerard Wagener
1a4985b872 Moved header file to arch/um/include/shared 2010-01-12 13:45:38 +01:00
Gerard Wagener
e10bc5fe3d Commented out my code from arch/um/kernel/exec aiming migration to aha.c 2010-01-12 13:43:45 +01:00
Gerard Wagener
9fe3d93db2 Add aha.c stub 2010-01-12 13:42:43 +01:00
Gerard Wagener
1204901470 Modified Makefile of uml kernel to compile aha.o 2010-01-12 13:42:07 +01:00
Gerard Wagener
c4db6aede0 Standard config 2010-01-10 20:11:32 +01:00
Gerard Wagener
56df953f17 Some random notes 2010-01-10 20:11:03 +01:00
Gerard Wagener
7ce1919c2f Script to start UML; can't remember arguments :) 2010-01-10 20:09:59 +01:00
Gerard Wagener
b30d45db44 aha-worker parses now also the messages and put them in a log file 2010-01-09 18:37:30 +01:00
Gerard Wagener
3859a6d83b Focus only on decisions and retrieval of messages; rest went to ahalib 2010-01-09 18:36:36 +01:00
Gerard Wagener
317b01bcf4 Put common classes between aha and aha-worker in a different file 2010-01-09 18:35:51 +01:00
Gerard Wagener
91a9818bd7 Reduced sleeptime to facilitate debugging 2010-01-09 18:35:22 +01:00
Gerard Wagener
0c401688fc Add sample / unfinished configuration file for the aha framework 2010-01-08 22:26:05 +01:00
Gerard Wagener
e50b1b2c29 Forgot that the index 0 was reserved 2010-01-08 22:25:24 +01:00
Gerard Wagener
16989baa5f Temporary code to randomly insult user when vi is started multiple times 2010-01-08 22:23:41 +01:00
Gerard Wagener
cfaae0fe35 Kernel handle variable insult messages 2010-01-08 21:56:10 +01:00
Gerard Wagener
55c0994faa Removed cleanup todo; aha-worker from the home os is doing that now 2010-01-08 18:13:03 +01:00
Gerard Wagener
efcbc9b988 Add insulting program 2010-01-08 18:08:10 +01:00
Gerard Wagener
6b61d01bb4 Implement in kernel space decisions from AHA 2010-01-08 17:33:22 +01:00
Gerard Wagener
9c41027eea AHA can block calls. Currently vi is blocked 2010-01-08 17:32:12 +01:00
Gerard Wagener
fbc4051c25 Add worker process that cleans up periodically 2010-01-08 15:16:01 +01:00
Gerard Wagener
a9d6882588 Forgot to include additional header file 2010-01-07 20:45:51 +01:00
Gerard Wagener
adf5e80cda First version that asks aha framework for permission to execute it 2010-01-07 20:42:50 +01:00
Gerard Wagener
509cf94a40 Fixed bug where aha generated empty messages 2010-01-07 20:33:23 +01:00
Gerard Wagener
582318e4cb Decision engine creates messages 2010-01-07 18:00:39 +01:00
Gerard Wagener
4d468f9ad9 Changed fromat of the end tag such that it is easier parsable by the aha
decision engine
2010-01-07 17:59:45 +01:00
Gerard Wagener
42f3981edd First attempt to automatically grasp kernel events from the UML 2010-01-07 16:48:45 +01:00
Gerard Wagener
7cf462a52c add todo: clone system calls need to be monitored too. Now I have
concurrent access
2010-01-07 14:49:58 +01:00
Gerard Wagener
fc8522fbef PID and PPID and real_parent is logged 2010-01-07 14:48:05 +01:00
Gerard Wagener
45c34f8314 Cleaned up the code a bit 2010-01-07 13:47:12 +01:00
Gerard Wagener
e1e908b8cb Nasty code to generate unique files with the output of sys_execve arguments 2010-01-06 22:57:07 +01:00
Gerard Wagener
7025b6f9cb printk program name and command line arguments
First attempt to log the program name with its command line arguments,
with an additional function integrated in sys_execve
2010-01-05 21:20:31 +01:00