network.detectors
Class FileSBitChangedEventDetector

java.lang.Object
  |
  +--network.detectors.EventDetector
        |
        +--network.detectors.FileSBitChangedEventDetector

All Implemented Interfaces:

java.lang.Runnable, java.io.Serializable

public class FileSBitChangedEventDetector

extends EventDetector

implements java.io.Serializable

Generates FileSBitChangedEvents based on a comparison of the previous permissions and the new permissions.

See Also:

Serialized Form

Field Summary

private java.lang.String[]

defaultLocalTriggeringEvents

Fields inherited from class network.detectors.EventDetector

agentURN, attempts, cred, dbModule, eventIDGenerator, eventTable, host, localTriggeringEvents, printRunningThreadsFlag, remoteTriggeringEvents, reportTable

Constructor Summary

FileSBitChangedEventDetector(ConfigObject configObj)
Sets up the triggering events.

FileSBitChangedEventDetector(java.util.Vector localtriggeringEventClassNames, java.util.Vector remotetriggeringEventClassNames, ConfigObject configObj)

Method Summary

java.util.Vector	generateEvent(network.events.Event triggeredEvent) Decides whether or not to generate a FileSBitChangedEvent.
java.lang.String	getGeneratingEventClassName() Returns the class name of the events that may (or may not) be generated.
private int	getSBit(int mode) Used to find out which of the setgid or setuid bits are on.

Methods inherited from class network.detectors.EventDetector

getAlarmLevel, getAlertLevel, getLocalTriggeringEventClassNames, getRemoteTriggeringEventClassNames, getSynchronizer, InitializeFields, modifyDetector, populatePatterns, printRunningThreads, run, setAgentURN, setAlarmLevel, setAlertLevel, setDB, setEventIDGenerator, setEventTable, setLocalTriggeringEvents, setRemoteTriggeringEvents, setReportTable, stopDetector, switchOffPrintRunningThreads

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

defaultLocalTriggeringEvents

private java.lang.String[] defaultLocalTriggeringEvents

Constructor Detail

FileSBitChangedEventDetector

public FileSBitChangedEventDetector(ConfigObject configObj)

Sets up the triggering events.

Parameters:

configObj -

FileSBitChangedEventDetector

public FileSBitChangedEventDetector(java.util.Vector localtriggeringEventClassNames,
                                    java.util.Vector remotetriggeringEventClassNames,
                                    ConfigObject configObj)

Parameters:

localtriggeringEventClassNames -

remotetriggeringEventClassNames -

configObj -

Method Detail

getGeneratingEventClassName

public java.lang.String getGeneratingEventClassName()

Returns the class name of the events that may (or may not) be generated.

Specified by:

getGeneratingEventClassName in class EventDetector

Returns:

the generating class's name.

generateEvent

public java.util.Vector generateEvent(network.events.Event triggeredEvent)

Decides whether or not to generate a FileSBitChangedEvent.

Specified by:

generateEvent in class EventDetector

Parameters:

triggeredEvent - the event that triggered FileSBitChangedEventDetector

Returns:

returns null, an error event, or a FileSBitChangedEvent in vector form

getSBit

private int getSBit(int mode)

Used to find out which of the setgid or setuid bits are on.

Parameters:

mode - the permissions in decimal form

Returns:

0 for neither setgid nor seguid, 1 for only setgid, 2 for setuid, 3 for both setgid and setuid