# encoding: utf-8 # copyright: 2015, Vulcano Security GmbH # license: All rights reserved class Processes < Vulcano.resource(1) name 'processes' attr_reader :list def initialize(grep) # turn into a regexp if it isn't one yet if grep.class == String grep = '(/[^/]*)*'+grep if grep[0] != '/' grep = Regexp.new('^' + grep + '(\s|$)') end # get all running processes cmd = vulcano.run_command('ps aux') all = cmd.stdout.split("\n")[1..-1] all_cmds = all.map do |line| # user 32296 0.0 0.0 42592 7972 pts/15 Ss+ Apr06 0:00 zsh line.match(/^([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+([^ ]+)\s+(.*)$/) end.compact.map do |m| { user: m[1], pid: m[2], cpu: m[3], mem: m[4], vsz: m[5], rss: m[6], tty: m[7], stat: m[8], start: m[9], time: m[10], command: m[11] } end @list = all_cmds.find_all do |hm| hm[:command] =~ grep end end end