From ba8dad4a243f5813d77842b6bb658cb7c861e58b Mon Sep 17 00:00:00 2001 From: "qcqcqc@wsl" <1220204124@zust.edu.cn> Date: Mon, 28 Apr 2025 10:43:08 +0800 Subject: [PATCH] make --- build/config.o | Bin 1784 -> 1704 bytes build/execve_interceptor.o | Bin 5200 -> 5184 bytes build/intercept.so | Bin 31320 -> 31320 bytes build/rules.o | Bin 1560 -> 1568 bytes config/config.yaml | 4 --- config/execve_rules.json | 41 ----------------------------- logs/execve.log | 8 ------ logs/execve_out.log | 0 logs/execve_out.log.2649049.stderr | 3 --- logs/execve_out.log.2649049.stdout | 3 --- logs/execve_out.log.2651269.stderr | 3 --- logs/execve_out.log.2651269.stdout | 3 --- test_bash.sh | 2 +- 13 files changed, 1 insertion(+), 66 deletions(-) delete mode 100644 config/config.yaml delete mode 100644 config/execve_rules.json delete mode 100644 logs/execve.log delete mode 100644 logs/execve_out.log delete mode 100644 logs/execve_out.log.2649049.stderr delete mode 100644 logs/execve_out.log.2649049.stdout delete mode 100644 logs/execve_out.log.2651269.stderr delete mode 100644 logs/execve_out.log.2651269.stdout diff --git a/build/config.o b/build/config.o index 0b9839b5ff8d2069e36820f9f4219fbb9916019c..868d3e69a2969f133b70ea8398dbff4641dc11cc 100644 GIT binary patch delta 249 zcmeytyMlLu2BXGAO%<61%nS_s7#J9s_PchnGrRz@7&=}5G}r$5U&=nQ!gu0jtH}b4 zE<(j130FRWHYR6YHl{2dc8qC*Nc=XH=dn$YjD(oROPY!cdS}RFq#d zIgm-7(P8pMCUM4~$%Q~NYVtxR@yRckJ^-~8G73+A!>qz-!2~jxfgxeCB#SxY=E;F9 z_CRtXi#_LNhy(*KL@kR7}k6u;~-=p(5SbSop zFL!!si9%XpW=?7f!^F+D6W_WEHG!14@(HvtIrFkHRr0WNOg3benw-EG!Pqo;C!;x| z%H)rXCOieHMMe2V48<9_i6xT_ndBvPK>C1y35c12_|Ja`Fqs_4B+lqRxsgd+G7+Qz z2w-ZsAY6t_kebOem_7il2xJtVJcn6@GXkUt2qsKE$!yMeXfh*4uLsBdO8X%1sw!711V0U(%orTs| zY1~#>whfRN(w|j-(3pUU36Iz)D=1qMV^(QQjhZw@3Jr!7H3k)}=gi!@dzp4p#FO2b zd%ydgbH4kWdsM2~QsD6rW*+h)$=4W4NV+&*uC$7kWG0zGe)T^4XPun9DJOo8%E^`< zIT`PklXYEkM!Ju*J5%I@bl)Q*8n>9&Y0kEEyyz0D8{Rz`hlLLAH93>Pk)@*#U8N16)h^jHwc1Glm>*gzw8goM z3&|?wG3Y=#UxS`5qS0$0OsWq0y}jG+J5E#8Xm6Q~|7(HCz=5(u`sw}2n z*fx!}NtA2V#|t)LKaLj=l9BpRMn=lwYxo|FeoD&9U9y&4^p!m@xZgT=Oons=52^LG z<6OD3VM}v;^R}G=c0%g+P>-|~zw;!X91t6qGxTn<{8(M#l>CRd-uC0rX@?%cp(lAQ zx7suLMK~U2t=ePK<<^$V`^<&#Y&M<8P=0mi16Xdu9b=U|%E;_}EcJOA2`P(*LfT%- z>!qx>#{G?{HvSX)I zQ(Lw91)?^o{=+Jf3?pI)nl1!FvF7m7QX4K^wn11NDH6g55gGR7#WFAtNUj^t05Qo@pb zON3j!XKwYL9ZH_L{Z7XUVd&UtZ0qeEYCAFf_PLuUP7hr;wm~3863C02T0|H8KHU$g z)PP8esw29o>2ZiHpiqk-iXu_57nr;vTyOOVQ)A{LLbg^{ZxEK&HNu*AYsB)h zinvv+czx9>v3$)k3KIe+Fu_kNp0HbAsw1$E(}=+-W7!<~_Pn~2c$$hmCDRM1orGn* z0C4=H&7BGlX=d@81=TaAPMSFtC>B2616(2Jz0vX7CXM^$M=jR*|B%ZwP@83`w_%pC z1gf*SIF>fRO5x94A#5jjE_1=lUGQ}-_!bv@y9>U{1=n2gS6uKW7rfO4Z+F2@x!~`) z;P1QO%`W(P7yM%v{E7?yg$qu1x1#B$YWUTt88JjZi5OZ?q5Gbm2vK|I#7sl?hoeMM z{AP1hRT>mLE&vUwIFs z3HUR7KZnCnlf&CNoacW=ai-G?K4>>MKHiR5{2wU395Bqy@LMkUZ(JO_Uo-wc9DgQ< zPeUPKOb?zTX!9tJIZ-2vQ_A6ZelUCmhtJ~h4IDn3!zGG4`xSM;-*v(JUGPFWq1cSY zHSkB9O>ykkQ}Ac{cRToOy(upIgA{k_PrLB%ayWiNSl)#w1dQpdx2t41#hp6WQrwyM zh$GH^8s`m{I3GIrD&=41_;`zEI z^;Sqffo$BaQaxUZBcG46-ogK#@;7sQemz7T{2wX5h2!(%^A?BmI?qwuIbYv#{CN;c&;~a>RfIcGSOZ{0s>YmHb>J?DHm=Db*)S3TZj7Zo95ii%(k zOpoh@DunchM*Ky8pfNFl3I z-j8`_=H2OjwQfz3BoQVOSxH8E3?(FAHqx$kn$=_~nL_^ZJ$}1EOI_8HH)2|9Uze6j zoX}DYo!7@}NwrJT(rTCQG&z{H7xbf+mM)`^<~yI&B>2nw&Jf?3>|7!fawwbV!Er5> zbLp84Lr!1HYbkXQjYbC1=%Dtz+O?avIS6jNY+j%~4`vf3-5AEe_VEx)1|INA{h;M? zLm;lp)VEri4nVAKD@`;AZK+5AI5WkyaS1|pOgo&fF@;WR1cM3mjP$_V9BRD|%%mGS zwe-3Z?%dJVs-gTqcQHhl+}A_Kre=_uR(l``$(s_SdraevR3m+$_=Aa<_%SsWx*8B9 zm3?5EX!ty2r-=lI;jz&_J58;Zf*O)bSm>pO&N<;{l8%(D-^5A39RL!ug4 z$9|>*&kWe^K{v^4v36fm=_wkH(LYR}nHZ^x(Uv8`Y z1U&cJGe>yB?iL0H+DAunFPYhLU(t^ovZUINMWM&t%gfb%U;CZEhlZ|89m#z+?&0** zJK1WW$8UJON1sY(`dUuyg?SRE#Pv#WLOY3F4*q+!%#81G1lpar6P*2@_|+Nurgt1W zBXAD7L93f2#LRYM85+oH%5=RXdNl%tL|gwbCx1=jF8=#shP7N~2r6xkQ?I;HmY^?t5&~A$lBW474m|H zri5uH@!fv_<)L4R_T1@WR^$i3{LKZQoa*oWPZ|TjA zL~1RQ%1b9s>VWM#3vm3QJT?Iy>eRCLifX4!7&mPKP#nC_160B1t)W6=;|kscFcxR& z?^1afdefZfU6^?+hwgOFjuRVTv*E{GDO@FZR(jyidf<@bf_64};Ef)5lLx-j1CM&( zZ+YMu5B!)19`L|F_P|ei;HNzB(;oO&9ylK7LhJRT2Tl*Z9x`pi3K%gvYAFE{wL&dA zEeX0Fu=mCcy-CMY6Su9fVG^f25PfZ3ea)&my?)J_P3mTS^QxLURfjS6@Wt&QG)QyI z0^`l#C}fjx)F0FXQL{PJLPBvJd`3d1Kdd|D1C0kFG2*vc;(Eky2X>Ga1D<}1#1eL# z?6E?&0a3J&U?TQ%Jv+!T=FT!v+m)y38_y&jvpZO^LAG)DL=NB2;XMC5#o>HAXPeo% z$no(EG5i;bKLu~}&G6qm@INSy+!BsI$no*h!R!=aApl|VuzE9{;%KK7evChh!|@8t z@Od0QmBW{DI9$nw`7cpioYzhd{6i1?k_Rr~gh1H5o^-pUl;Suq+}AAr^#cC|%HQh2 z4^mu=|EveUpTnnderM8z<1jWg>UR#s#W*V{F8X~#u(OWZdE3LzDS^L{^1tNx(*a}o z$qM{1xEO;w%r> zU<~CIj{hk1nVmL)&+5fdjz5#*-=Vk|zYH7{^oze?QQ)3u`S4; zQ3S#GcwzCgcMS}(HqSdu^?3~2A{XlyQpNZ?sJ;wiyomAdgh8|^>VHo4pW~IGE$ZVg zEVTaBSX4mRI^+6Jh9A>scp=}Y*H8V&Xkev)p&wBnZHj9T5ZO|KPeNGza(komhu@@v O`ZRuRCSmMUn zM6xVv1E*8d>D0k#>)=>NWJe9qCd;F4RE922)L5~u4ceO~)C8i98od4fb1u74l%3f< z=lqZFf1LmP=kDzsV4VZ3so8dLvLZeQ4?dS|n;tC}(_i@@n~mB~B3I#&r&`*^ZW;Y} z-LB4tX@AJIeY9flvEy%#Ecf$X%Q@Z>ox+17G#1YpFNOdt9D-g3#OcP7um9}h_!=JOwO)bfnPTegB z62oSTKo9w*zBC-97#zar^e2<;w1=U5}RU zsNfB8yL{2{FHT%}c!Z*~0@Bi^x<@Md!v7hDTOD%M4jGP-Eo7>v(4!8WP!gq>;tuFB zkkQ;~pXRFVGaM5%uXS&_qG;fp=LtEpoLWE~6q;7er4BNPH7iwVnnxYfykq}H9L$?F z7Sue7*5G%1AXukDBM74I3jy8^t#-wc3h-zX{3l-;MvH+@cQX(ji&OmmlE47=N|vD2CdR10F# znb2II4({?u`QdU?f?9wOl^%-!2+1C?zoyjttFrVW#GrW+iNufQq~*2Kj9hvbF2O9A zSR*rTHALz=LZlwj7N|$|Wa)jB8=)P7_6%of6h&tJ%Xo_H4J{C$?C4hpD1-3U8bZlv zZdkLvM>Co2T)ndYy1>UK*&FW^7?d5c>H3bVhS5g#sb2-0q`fJCRli)lebq@>bW8&L zW58JscuyGuT5(tgMPP+Su={0H73couylXdd7xf7h*BlORZH`74L z%?#|vc@C%@R007tNJDo&Qt45HTC=t-IO&26lD64f90mKGrr`!*z}`TKH>I6FAb!{s zUn<4x4?^6fb}&=LFAR8_6p$&IWXI)?(!5D8rG;Zmi^S46|0c;Xp=ws$^PkfxuuhH8oQi%3L>-;RXjI$kYTNFsO2=+E}sCUt|6~|a)Z-&WPiFmvB%gyPd0}zieAgbfk>WU)+ zqKT&HM2I3JA@zPQ)Jmk9-in&1Jm?o-6}@$n?raC&qqqhwjyX`#TQ8F+BtoFO1`S66 zaNAQQ?VJcf;?@!F5W%6fnfyNw<8L7TMdF)|tO5bDM};ia)Et_X!qi$)Ln}ofAsO@2 zCg20$bTJPiv)s-6zPSA`-0}aqIqXmO9k2UzU0T}%}7`|oOF^8%$sJh_wvlV zS)$~f8z3QC3BqgLCupcIk97zSYbIK27;Rq|?Qj@PfUOj}VS-gku=#?f>K;ds zdbekVj;iTHTz6hTBrx%~Fo7Dk*Bg{}k9Di0gq*lPs<2+is~6-Jo<$P1)WMWt#A zsLLTGZlzNvrb4e32ZjRrVjKp*H;BB4Fk6oqY@zAK1;~)ezCT^fpp^=)mDPt7xTsW0&Ih3Exn)s~z6dOSE)FJzU2l(pz zq|Hy4;A z`M;5lhB!P9-B_O`pAM%EJDcsDGC+bS^!1FC%cj+ zK-HsQevv?QalNnMif|ALi#a zj8*vB-ZhMqL{k$IpRz28kG33(8;NU+_`k;YkNmmP^umD;4P*Crq#g-Nb%4I~qG5=? z_t#NIBt(+{p$y==h_kYEb_dVIZx=5tOV7+eo9Oxu;y(mp3TRb`wTnMlmd3u}zb~7} zZs(_bbFl=1Zc%65p}v=PmySnWb@b delta 4654 zcmai23v^V~6@7P-NireiS7LsU1mr7X5~rop=broK^$oJVLDt%4**!rLpWVCm&k+_{5oaTXOci{oILc-fud>viLhu>D(8kum{DgAX;H-#H=;Chh61aX3k|yAp*Ni zkoU%9@Q$bq?u%K)ws{I;XEQcRFt*1je6J;%AB`Ht{c)|lAU1>Vv}CYxe4k}@X3ad^ zt(p2DJ;Wp_RZ5h~_*qMSVc&H+xzwzWvkY$f0)1VEHGMKny4It7S$uxs#6q2#Wdz_R zLu*HgPCup((q@A`fxi%+&sOl0@#*YCejz@W?ckXsZnD%G{KcNlBhncERl?@P`qlT` zbKhOk7VG`@-c`TJV;=eJl~W0=OOoQGZrK?tsU=@)no}NfG!ALDD-^f+sa#1?oL+VC zD^25X7Nloiz(jG%1B#<@K(pmQ8iA@663OWvRKlGM~=ovapr%@<9d zR&eAzG~JaNu@vS5NQi{%LnIthisk)VC#$Ck-jz%g{`B-|_LYboY_#W)8;2FISHnjQ zd`V6mQe5T_kO9RBdGnhzb4f~bk8OrpcWzkVeS_>CxkX^Sh23<}rq#8Bn$}GzP|pBP zr}YS6xmRBu8nkN~@WuoFKHw|?ysNrRaV^~|HsK_&a?Ka$h=y%PW3MDc7hF!%O`uC8Ukk#N|&rEZOVGz_#}OklxBBj zH0%!;h93|HlA0;-hP3^A#P=HF*XiO-yCCk6`!%@R?qy<6 z&CQN8Wt=DBTNg#>JI73&L}ah*$4({DWc&O)q!8+)V zqMH9T0XXFjXmv<7ify{s*hH^-J3`+lpUL)-J;@6zQjmh&lIGL8M1 z56l@3UhxFrf-5gsi*#h8i0odHrK=pGxL*M1?C zF7s@ImO``-`L3d@bsAs|sGSDX5K^Q=Ehi}V(w&OCx)rwja7pXd8X$rz8jvThMFXlH zawg-tmV`&Q8Za-0VMg%exufh0;RC7-?mr8gF8Qd)E0!Z8E{rjBH-vS2FoP__wn8kx zM4zN(tpM?L;;}*M!d)W`cZWO9=zAr{B&BVMd*plRl5~UJ*@JMsi>cx~h*?m~4t0qh z`oo5VzMC0s>|l1 zqv=|zq96valWyz;ChCLxFz>@r?2Vh@(?J?r1zNSto)z z7gFMqJ=i%3dR;gQRNm*W5F1jrh_L%%=LWq9-sQ)NuUT6mP)<1-Pw6Oc%=liECIcl} z*R6*X&Yj=xP`3l|Es=vh%$fqj$^9v2diAvPjU{=-xQ5|=dRcbWUO8Z?BwB%K3M-;`|J;**cy4ZSHw64U6?+(FG0Ein=)L=RPDTtmEiU4rW2P zL$cLML@2fBm{r zwwTA4ZpdmsO;y!g03|#)inG*ByH`*1UzBENE&fc?BGoK7dNoexuaw@#YI#ms9$Uyu z%hD{Zsd{ef_{y>|Q#$`i1tC(|FkVeKg-oC|Mkh60z+piptTCj=@!yr@v-$kJvT>P7 zkV5(4W^fn$hf>#%D+T_3%@fP7VSRjF`JOwbp-qH4$mmanLI@j3rptf0vqXd5NyiU{ zOcyHzKN(hVlLFoH!oqukZhn9l&7a6#_nahm%(dXUBt3zy zkwqjcyy}K>b5G#!Lz>nac$U%hce=dgceBF3n#P}Fc zx|4AtRSz6axG3FLezqcG`9|U{^%o5eVR# zT@hh6M40tDb8dvWD#ENhSt?Y=M7To7izXPKQQ$t0cTpWi&y6ncYaRZV1hyu2#C zD8r{|WprYU&uENRd@mf;w7(EdPE3BtR53EfbRZ!XmmBeaNngIJD!2U9N1C?d5~+r; z)KSnE9@jMSw|y8TDkX*l2xSmoycVd+Wm9=dbuRmi7gpzv9f!7b>=HzuK+FKmN-^M@ ztFzg8?ykNPFEw6(MhIO_yif?+m}L&zfJQn$3-sBZlv`Gq`A=%fSc~W7n&)HK9KL={ zK5OB-*Idsw@sn#lU^V>ZySCw#LE+l#Ss8Cw`zTxCv8=PRu@j2OBS~6`KY8>yhmqcD zgx^5$XYT$p`s(W1ZJFPG$MGtHOR{jIHlID}8C&--!wZRL*579dzu54M-SC?P_6C1> pYrdsL)@`)#vs2IGy1nnu?A3=FLYO1XA0GB7Z_Tn!|SyZ!-^3@_Wk>>nWZan~;(>DOM} zu75mccpQAd;n6!mfpy}7aHUzzwLch2*>`}Hy_RWq{ln=v4rRyL5p0vr5 zjOLU57~O