aquasecurity / aquasecurity/tracee

Capture executed memfd files

Open
#2,567 0 comments 0 reactions 0 assignees View on GitHub
area/capture kind/feature priority/backlog
Dominant language
Go
Stars
4.6k
Forks
507
Avg merge
2d 8h
Merged PRs (30d)
9

Description

`--capture exec` feature is not capturing memfd files at the moment. memfd seems to be available on procfs just like the other opened files https://man7.org/linux/man-pages/man2/memfd_create.2.html

Contributor guide

Open the contributing guide

Research direction

Start at the --capture exec entry point and trace how opened files are enumerated through procfs. Compare the handling of memfd files with the behavior described for memfd_create(2); done means memfd files are included in capture output.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, linux
Domain
operating-systems, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.