dxs/onionr
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

added disk ministry

Browse source
This commit is contained in:
Kevin Froman 2020-03-31 00:15:24 -05:00
parent 09134eaba4
commit b2f630e4f9
3 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/bigbrother/__init__.py
View file

@ -40,6 +40,8 @@ def sys_hook_entrypoint(event, info):
ministry.ofexec.block_exec(event, info)
elif event == 'system':
ministry.ofexec.block_system(info)
elif event == 'open':
ministry.ofdisk.detect_disk_access(info)
def enable_ministries(disable_hooks: Iterable = None):

1
src/bigbrother/ministry/__init__.py
View file

@ -1,2 +1,3 @@
from . import ofcommunication # noqa
from . import ofexec # noqa
from . import ofdisk # noqa

21
src/bigbrother/ministry/ofdisk.py Normal file
View file

@ -0,0 +1,21 @@
from utils.identifyhome import identify_home
import logger
def detect_disk_access(info):
if type(info[0]) is int: return
if '/dev/null' == info[0]: return
whitelist = [identify_home(), 'onionr/src/', '/site-packages/', '/usr/lib64/']
for item in whitelist:
if item in info[0]:
return
if identify_home() not in info[0]:
if 'proc' in info[0]:
logger.warn(f'[DISK MINISTRY] {info} - probably built in Onionr stats')
else:
logger.warn(f'[DISK MINISTRY] {info}')