actrpc-interceptor 0.1.0

Concrete interceptors for ActRPC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

rules:
  - name: block_sensitive_system_writes
    match_expr:
      all:
        - condition:
            fact: phase
            matcher:
              kind: exact
              value: outbound
        - condition:
            fact: message.method
            matcher:
              kind: exact
              value: write_file
        - any:
            - condition:
                fact: message.params.path
                matcher:
                  kind: glob
                  value: /etc/**
            - condition:
                fact: message.params.path
                matcher:
                  kind: glob
                  value: /root/**
    apply:
      immediate:
        - reject_call:
            error:
              code: -32010
              message: write to sensitive system path denied