programName returns the lowercased basename of a command's leading token ("cat /a/b" -> "cat", "/usr/bin/python3 x" -> "python3"), for matching against a runtime event's process comm.
(command string)
| 353 | // ("cat /a/b" -> "cat", "/usr/bin/python3 x" -> "python3"), for matching against |
| 354 | // a runtime event's process comm. |
| 355 | func programName(command string) string { |
| 356 | fields := strings.Fields(command) |
| 357 | if len(fields) == 0 { |
| 358 | return "" |
| 359 | } |
| 360 | prog := fields[0] |
| 361 | if i := strings.LastIndex(prog, "/"); i >= 0 { |
| 362 | prog = prog[i+1:] |
| 363 | } |
| 364 | return strings.ToLower(prog) |
| 365 | } |
| 366 | |
| 367 | func persistDiffs(db *sql.DB, runID string, diffs []IntentRuntimeDiff) error { |
| 368 | tx, err := db.Begin() |
no outgoing calls