internal/

Package artifact reads UAC artifact definition files.

Package config reads UAC's uac.conf.

Package content opens a matched file once and shares it with every collector that asked for its bytes.

Package fileattr renders Linux file attributes the way the command line tools do, so that artifacts which pipe find(1) output through getcap or lsattr can be reproduced without running either.

Package fsref resolves a path into the single metadata record every rule and collector reads from.

Package mounts reads the mount table, so that artifacts declaring exclude_file_system can be honoured.

Package outdir names and creates the directory one collection writes into.

Package passwd reads the account databases out of the image being examined, rather than the host's.

Package rules compiles UAC artifact entries into predicates evaluated during a single filesystem walk.

Package spool persists scan results to disk as they are produced.

Package targetos identifies the operating system of the image being collected from, so that artifacts declaring supported_os can be filtered.

Package uacdata carries UAC's artifact definitions inside the binary.

Package uacpath locates the UAC repository that uacscan reads artifacts from and compares itself against.

Package walk traverses the image once and dispatches every path to every collector.