Changeset 305

Timestamp:

05/04/07 22:43:55 (2 years ago)

Author:

kindlund

Message:

Added change file output support back into integrity module.

Files:

• honeyclient/branches/exp/kindlund-filesystem/etc/honeyclient.xml (modified) (1 diff)
• honeyclient/branches/exp/kindlund-filesystem/lib/HoneyClient/Agent/Integrity.pm (modified) (2 diffs)

honeyclient/branches/exp/kindlund-filesystem/etc/honeyclient.xml

@@ -125 +125 @@
-        <!-- HoneyClient::Agent::Integrity Options -->
-        <Integrity>
+            <changes_found_file description="When an integrity check fails, all changes will be written to this file within the compromized honeyclient VM's filesystem." default="/tmp/changes.txt">
+                /tmp/changes.txt
+            </changes_found_file>
-            <!-- HoneyClient::Agent::Integrity::Filesystem Options -->
-            <Filesystem>

honeyclient/branches/exp/kindlund-filesystem/lib/HoneyClient/Agent/Integrity.pm

@@ -339 +339 @@
-    # (For internal use only.)
-    _filesystem => undef,
+
+    # XXX: comment this
+    _changes_found_file => getVar(name => 'changes_found_file');
-);
-
@@ -542 +545 @@
-    };
-
+    # If any changes were found, write them out to the
+    # filesystem.
+    if (scalar(@{$changes->{registry}}) ||
+        scalar(@{$changes->{filesystem}})) {
+        if (!open(CHANGE_FILE, ">>" . $self->{_changes_found_file})) {
+            $LOG->error("Unable to write changes to file '" . $self->{_changes_found_file} . "'.");
+        } else {
+            $Data::Dumper::Terse = 1;
+            $Data::Dumper::Indent = 1;
+            print CHANGE_FILE Dumper($changes);
+            close CHANGE_FILE;
+        }
+    }
+
-    return $changes;
-}