eventlog

Documentation

Overview

Package eventlog parses kernel event logs and saves the parsed data on a file on disk.

Index

• func Add(b []byte) error
• func ParseEventLog() error
• type EventLog
  • func (e *EventLog) Parse() error

Functions

func Add

func Add(b []byte) error

Add writes event logs to sysfs file.

func ParseEventLog

func ParseEventLog() error

ParseEventlog uses the tpmtool package to parse the event logs generated by a kernel with CONFIG_SECURE_LAUNCH enabled and and queues the data to persist queue.

These event logs are originally in binary format and need to be parsed into human readable format. An error is returned if parsing code fails in tpmtool.

Types

type EventLog

type EventLog struct {
	Type     string `json:"type"`
	Location string `json:"location"`
}

EventLog stores location for dumping event logs on disk.

func (*EventLog) Parse

func (e *EventLog) Parse() error

Parse parses the eventlog section of the policy file.

The location of the file on disk is specified in the policy file by the Location tag. An error is returned if parsing fails or an incorrect value or format is used.