Default package

Get desktop application:
View/edit binary Protocol Buffers messages

Event log data for command accepted by the policy.

Used in: ClientMessage

• optional TimeSpec submit_time = 1

  when command was submitted

• repeated InfoMessage info_msgs = 2

  key,value event log data

• bool expect_iobufs = 3

  true if I/O logging enabled

Alert message, policy module-specific.

Used in: ClientMessage

• optional TimeSpec alert_time = 1

  time alert message occurred

• string reason = 2

  policy alert error string

• repeated InfoMessage info_msgs = 3

  optional key,value event log data

Window size change event.

Used in: ClientMessage

• optional TimeSpec delay = 1

  elapsed time since last record

• int32 rows = 2

  new number of rows

• int32 cols = 3

  new number of columns

Hello message from client when connecting to server.

Used in: ClientMessage

• string client_id = 1

  free-form client description

Client message to the server. Messages on the wire are prefixed with a 32-bit size in network byte order.

• oneof type

  • AcceptMessage accept_msg = 1

  • RejectMessage reject_msg = 2

  • ExitMessage exit_msg = 3

  • RestartMessage restart_msg = 4

  • AlertMessage alert_msg = 5

  • IoBuffer ttyin_buf = 6

  • IoBuffer ttyout_buf = 7

  • IoBuffer stdin_buf = 8

  • IoBuffer stdout_buf = 9

  • IoBuffer stderr_buf = 10

  • ChangeWindowSize winsize_event = 11

  • CommandSuspend suspend_event = 12

  • ClientHello hello_msg = 13

Command suspend/resume event.

Used in: ClientMessage

• optional TimeSpec delay = 1

  elapsed time since last record

• string signal = 2

  signal that caused suspend/resume

Might revisit runtime and use end_time instead

Used in: ClientMessage

• optional TimeSpec run_time = 1

  total elapsed run time

• int32 exit_value = 2

  0-255

• bool dumped_core = 3

  true if command dumped core

• string signal = 4

  signal name if killed by signal

• string error = 5

  if killed due to other error

Sudo response to an InterceptHello from sudo_intercept.so. The client uses the port number and token to connect back to sudo. If log_only is set there is no InterceptResponse to a PolicyCheckRequest.

Used in: InterceptResponse

• fixed64 token_lo = 1

• fixed64 token_hi = 2

• int32 portno = 3

• bool log_only = 4

Key/value pairs, like Privilege Manager struct info. The value may be a number, a string, or a list of strings.

Used in: AcceptMessage, AlertMessage, RejectMessage

• string key = 1

• oneof value

  • int64 numval = 2

  • string strval = 3

  • InfoMessage.StringList strlistval = 4

  • InfoMessage.NumberList numlistval = 5

Used in: InfoMessage

• repeated int64 numbers = 1

Used in: InfoMessage

• repeated string strings = 1

Hello message from sudo_intercept.so to main sudo process. Sudo sends back the token and localhost port number.

Used in: InterceptRequest

• int32 pid = 1

Intercept message from sudo_intercept.so. Messages on the wire are prefixed with a 32-bit size in network byte order.

• oneof type

  • PolicyCheckRequest policy_check_req = 1

  • InterceptHello hello = 2

Response sent back to sudo_intercept.so.

• oneof type

  • HelloResponse hello_resp = 1

  • PolicyAcceptMessage accept_msg = 2

  • PolicyRejectMessage reject_msg = 3

  • PolicyErrorMessage error_msg = 4

I/O buffer with keystroke data

Used in: ClientMessage

• optional TimeSpec delay = 1

  elapsed time since last record

• bytes data = 2

  keystroke data

Used in: InterceptResponse

• string run_command = 1

• repeated string run_argv = 2

• repeated string run_envp = 3

Policy check request from sudo_intercept.so. Note that the plugin API only currently supports passing the new environment in to the open() function.

Used in: InterceptRequest

• string command = 1

• string cwd = 2

• repeated string argv = 3

• repeated string envp = 4

• int32 intercept_fd = 5

Used in: InterceptResponse

• string error_message = 1

Used in: InterceptResponse

• string reject_message = 1

Event log data for command rejected by the policy.

Used in: ClientMessage

• optional TimeSpec submit_time = 1

  when command was submitted

• string reason = 2

  reason command was rejected

• repeated InfoMessage info_msgs = 3

  key,value event log data

Used to restart an existing I/O log on the server.

Used in: ClientMessage

• string log_id = 1

  ID of log being restarted

• optional TimeSpec resume_point = 2

  resume point (elapsed time)

Hello message from server when client connects.

Used in: ServerMessage

• string server_id = 1

  free-form server description

• string redirect = 2

  optional redirect if busy

• repeated string servers = 3

  optional list of known servers

• bool subcommands = 4

  flag: server supports sub-commands

Server messages to the client. Messages on the wire are prefixed with a 32-bit size in network byte order.

• oneof type

  • ServerHello hello = 1

    server hello message

  • TimeSpec commit_point = 2

    cumulative time of records stored

  • string log_id = 3

    ID of server-side I/O log

  • string error = 4

    error message from server

  • string abort = 5

    abort message, kill command

Equivalent of POSIX struct timespec

Used in: AcceptMessage, AlertMessage, ChangeWindowSize, CommandSuspend, ExitMessage, IoBuffer, RejectMessage, RestartMessage, ServerMessage

• int64 tv_sec = 1

  seconds

• int32 tv_nsec = 2

  nanoseconds