falco_event_schema::fields

Module event_flags

Source
Expand description

§Event flags

This module contains the definitions of event flags used in Falco events. These flags are either enums (one value of the enum is set) or bitflags (multiple values can be set at the same time).

Structs§

PT_FLAGS8_quotactl_dqi_flags
PT_FLAGS8_quotactl_quota_fmts
PT_FLAGS8_quotactl_types
PT_FLAGS16_creat_flags
PT_FLAGS16_file_flags
PT_FLAGS16_futex_operations
PT_FLAGS16_quotactl_cmds
PT_FLAGS16_semctl_commands
PT_FLAGS16_semop_flags
PT_FLAGS32_access_flags
PT_FLAGS32_clone_flags
PT_FLAGS32_delete_module_flags
PT_FLAGS32_epoll_create1_flags
PT_FLAGS32_execve_flags
PT_FLAGS32_execveat_flags
PT_FLAGS32_fchownat_flags
PT_FLAGS32_file_flags
PT_FLAGS32_finit_module_flags
PT_FLAGS32_flock_flags
PT_FLAGS32_io_uring_enter_flags
PT_FLAGS32_io_uring_setup_feats
PT_FLAGS32_io_uring_setup_flags
PT_FLAGS32_linkat_flags
PT_FLAGS32_memfd_create_flags
PT_FLAGS32_mlock2_flags
PT_FLAGS32_mlockall_flags
PT_FLAGS32_mmap_flags
PT_FLAGS32_mount_flags
PT_FLAGS32_newfstatat_flags
PT_FLAGS32_openat2_flags
PT_FLAGS32_pf_flags
PT_FLAGS32_pidfd_open_flags
PT_FLAGS32_prot_flags
PT_FLAGS32_renameat2_flags
PT_FLAGS32_semget_flags
PT_FLAGS32_splice_flags
PT_FLAGS32_umount_flags
PT_FLAGS32_unlinkat_flags
PT_MODE_chmod_mode
PT_MODE_mknod_mode

Enums§

PT_ENUMFLAGS8_fcntl_commands
PT_ENUMFLAGS8_lseek_whence
PT_ENUMFLAGS8_rlimit_resources
PT_ENUMFLAGS8_shutdown_how
PT_ENUMFLAGS8_sockopt_levels
PT_ENUMFLAGS8_sockopt_options
PT_ENUMFLAGS16_io_uring_register_opcodes
PT_ENUMFLAGS16_ptrace_requests
PT_ENUMFLAGS32_bpf_commands
PT_ENUMFLAGS32_fsconfig_cmds
PT_ENUMFLAGS32_prctl_options
PT_ENUMFLAGS32_socket_families