Expand description
Memory protection checks โ memfd_secret, core limits, swap exposure.
Functionsยง
- check_
all_ ๐daemon_ limits - Check that all daemon PIDs have a specific
/proc/<pid>/limitsvalue. - check_
kernel_ ๐config - Check a kernel config option from /proc/config.gz or /boot/config-*.
- checks
- daemon_
pids ๐ - Get PIDs of all running open-sesame daemons.
- total_
daemon_ ๐swap - Sum VmSwap across all daemon PIDs.