Gerard Wagener
|
3fd629f6f3
|
Try #1: Integrate process tree analysis in aha
Problem: Exceptions are thrown: Need to distinguish between message types
|
2010-01-15 10:20:47 +01:00 |
|
Gerard Wagener
|
5117feb142
|
Reassemble process trees
Check if a process belongs to the system or a user
|
2010-01-15 09:55:26 +01:00 |
|
Gerard Wagener
|
defd699bd8
|
Add idea to implement signal handler to flush the file
|
2010-01-14 15:49:51 +01:00 |
|
Gerard Wagener
|
9a996274ef
|
Put unique filename / message name in logs for replay
|
2010-01-14 15:39:58 +01:00 |
|
Gerard Wagener
|
ca75ba0ac5
|
Removed temp printk
|
2010-01-14 15:09:42 +01:00 |
|
Gerard Wagener
|
6c86c14a9b
|
Set message types for differentiating between clone and execve messages
|
2010-01-14 15:04:16 +01:00 |
|
Gerard Wagener
|
a644bbe929
|
Try #1: Bug fix for the buffers
|
2010-01-14 14:38:46 +01:00 |
|
Gerard Wagener
|
1e178854a5
|
This version has a major bugs with buffer sizes due to failed
inline optimizations my fault :-(
|
2010-01-14 11:50:14 +01:00 |
|
Gerard Wagener
|
41edea30d9
|
Found another place where forks should be investigated
|
2010-01-12 19:21:35 +01:00 |
|
Gerard Wagener
|
71d68f1386
|
Found the place where clones can be traced
|
2010-01-12 18:14:01 +01:00 |
|
Gerard Wagener
|
165804ff13
|
Updated config file for the current development version
|
2010-01-12 17:50:10 +01:00 |
|
Gerard Wagener
|
ad8a82b369
|
aha.py gets parameters from config file
|
2010-01-12 17:07:41 +01:00 |
|
Gerard Wagener
|
b07b91ce18
|
Do not used printk but PRINTK macro that can be enabled / disabled
|
2010-01-12 16:49:22 +01:00 |
|
Gerard Wagener
|
d0fa66220d
|
Add description for internal function
|
2010-01-12 16:40:05 +01:00 |
|
Gerard Wagener
|
3ec5e63ca7
|
Add some logging information if file write failed
|
2010-01-12 16:38:44 +01:00 |
|
Gerard Wagener
|
f8929ed150
|
Tried to split up the code
|
2010-01-12 16:35:11 +01:00 |
|
Gerard Wagener
|
2f50e920ff
|
Add new shared header file
|
2010-01-12 14:17:27 +01:00 |
|
Gerard Wagener
|
c429e39943
|
Version that compiles where aha code was moved to aha.c
|
2010-01-12 14:10:47 +01:00 |
|
Gerard Wagener
|
0c1d3789ba
|
Removed aha.h out of the main include directory
|
2010-01-12 13:46:44 +01:00 |
|
Gerard Wagener
|
1a4985b872
|
Moved header file to arch/um/include/shared
|
2010-01-12 13:45:38 +01:00 |
|
Gerard Wagener
|
e10bc5fe3d
|
Commented out my code from arch/um/kernel/exec aiming migration to aha.c
|
2010-01-12 13:43:45 +01:00 |
|
Gerard Wagener
|
9fe3d93db2
|
Add aha.c stub
|
2010-01-12 13:42:43 +01:00 |
|
Gerard Wagener
|
1204901470
|
Modified Makefile of uml kernel to compile aha.o
|
2010-01-12 13:42:07 +01:00 |
|
Gerard Wagener
|
c4db6aede0
|
Standard config
|
2010-01-10 20:11:32 +01:00 |
|
Gerard Wagener
|
56df953f17
|
Some random notes
|
2010-01-10 20:11:03 +01:00 |
|
Gerard Wagener
|
7ce1919c2f
|
Script to start UML; can't remember arguments :)
|
2010-01-10 20:09:59 +01:00 |
|
Gerard Wagener
|
b30d45db44
|
aha-worker parses now also the messages and put them in a log file
|
2010-01-09 18:37:30 +01:00 |
|
Gerard Wagener
|
3859a6d83b
|
Focus only on decisions and retrieval of messages; rest went to ahalib
|
2010-01-09 18:36:36 +01:00 |
|
Gerard Wagener
|
317b01bcf4
|
Put common classes between aha and aha-worker in a different file
|
2010-01-09 18:35:51 +01:00 |
|
Gerard Wagener
|
91a9818bd7
|
Reduced sleeptime to facilitate debugging
|
2010-01-09 18:35:22 +01:00 |
|
Gerard Wagener
|
0c401688fc
|
Add sample / unfinished configuration file for the aha framework
|
2010-01-08 22:26:05 +01:00 |
|
Gerard Wagener
|
e50b1b2c29
|
Forgot that the index 0 was reserved
|
2010-01-08 22:25:24 +01:00 |
|
Gerard Wagener
|
16989baa5f
|
Temporary code to randomly insult user when vi is started multiple times
|
2010-01-08 22:23:41 +01:00 |
|
Gerard Wagener
|
cfaae0fe35
|
Kernel handle variable insult messages
|
2010-01-08 21:56:10 +01:00 |
|
Gerard Wagener
|
55c0994faa
|
Removed cleanup todo; aha-worker from the home os is doing that now
|
2010-01-08 18:13:03 +01:00 |
|
Gerard Wagener
|
efcbc9b988
|
Add insulting program
|
2010-01-08 18:08:10 +01:00 |
|
Gerard Wagener
|
6b61d01bb4
|
Implement in kernel space decisions from AHA
|
2010-01-08 17:33:22 +01:00 |
|
Gerard Wagener
|
9c41027eea
|
AHA can block calls. Currently vi is blocked
|
2010-01-08 17:32:12 +01:00 |
|
Gerard Wagener
|
fbc4051c25
|
Add worker process that cleans up periodically
|
2010-01-08 15:16:01 +01:00 |
|
Gerard Wagener
|
a9d6882588
|
Forgot to include additional header file
|
2010-01-07 20:45:51 +01:00 |
|
Gerard Wagener
|
adf5e80cda
|
First version that asks aha framework for permission to execute it
|
2010-01-07 20:42:50 +01:00 |
|
Gerard Wagener
|
509cf94a40
|
Fixed bug where aha generated empty messages
|
2010-01-07 20:33:23 +01:00 |
|
Gerard Wagener
|
582318e4cb
|
Decision engine creates messages
|
2010-01-07 18:00:39 +01:00 |
|
Gerard Wagener
|
4d468f9ad9
|
Changed fromat of the end tag such that it is easier parsable by the aha
decision engine
|
2010-01-07 17:59:45 +01:00 |
|
Gerard Wagener
|
42f3981edd
|
First attempt to automatically grasp kernel events from the UML
|
2010-01-07 16:48:45 +01:00 |
|
Gerard Wagener
|
7cf462a52c
|
add todo: clone system calls need to be monitored too. Now I have
concurrent access
|
2010-01-07 14:49:58 +01:00 |
|
Gerard Wagener
|
fc8522fbef
|
PID and PPID and real_parent is logged
|
2010-01-07 14:48:05 +01:00 |
|
Gerard Wagener
|
45c34f8314
|
Cleaned up the code a bit
|
2010-01-07 13:47:12 +01:00 |
|
Gerard Wagener
|
e1e908b8cb
|
Nasty code to generate unique files with the output of sys_execve arguments
|
2010-01-06 22:57:07 +01:00 |
|
Gerard Wagener
|
7025b6f9cb
|
printk program name and command line arguments
First attempt to log the program name with its command line arguments,
with an additional function integrated in sys_execve
|
2010-01-05 21:20:31 +01:00 |
|