aquasecurity / aquasecurity/tracee
Capture executed memfd files
Open
area/capture
kind/feature
priority/backlog
- Dominant language
- Go
- Stars
- 4.6k
- Forks
- 507
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 9
Description
`--capture exec` feature is not capturing memfd files at the moment. memfd seems to be available on procfs just like the other opened files https://man7.org/linux/man-pages/man2/memfd_create.2.html
Contributor guide
Research direction
Start at the --capture exec entry point and trace how opened files are enumerated through procfs. Compare the handling of memfd files with the behavior described for memfd_create(2); done means memfd files are included in capture output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100