dissect.target.plugins.os.unix.linux.environ

Module Contents

Classes

EnvironPlugin

Linux volatile proc environment plugin.

Attributes

EnvironmentVariableRecord

dissect.target.plugins.os.unix.linux.environ.EnvironmentVariableRecord

class dissect.target.plugins.os.unix.linux.environ.EnvironPlugin(target: dissect.target.Target)

Bases: dissect.target.plugin.Plugin

Linux volatile proc environment plugin.

check_compatible() → None

Perform a compatibility check with the target.

This function should return None if the plugin is compatible with the current target (self.target). For example, check if a certain file exists. Otherwise it should raise an UnsupportedPluginError.

Raises:

UnsupportedPluginError – If the plugin could not be loaded.

environ() → Iterator[EnvironmentVariableRecord]

Return the initial environment for all processes when they were started via execve(2).

If the process modified its environment (e.g., by calling functions such as putenv(3) or modifying the environ(7) variable directly), this plugin will not reflect those changes.

Yields EnvironmentVariableRecord with the following fields:

hostname (string): The target hostname.
domain (string): The target domain.
ts (datetime): The modification timestamp of the processes' environ file.
name (string): The name associated to the pid.
pid (varint): The process id (pid) of the process.
variable (string): The name of the environment variable.
content (string): The contents of the environment variable.