What is Scheck¶

• Version: 1.0.7-7-g251eead

• Release Date: 2023-04-06 11:17:57

  A critical task in operations is inspecting the status of systems, software, logs, and other components. Traditional approaches often rely on engineers writing shell (bash) scripts and using remote script management tools to manage clusters. However, this method is highly dangerous. Because system inspection operations require elevated privileges, they are often run as root. Once a malicious script executes, the consequences can be catastrophic. There are two types of malicious scripts: one contains malicious commands, such as rm -rf, and the other steals data by leaking it through network I/O. Therefore, Security Checker aims to provide a new, secure scripting approach (restricting command execution, local I/O, and network I/O) to ensure all actions are safe and controllable. Security Checker collects inspection events via logs through a unified network model. Additionally, Security Checker offers a vast, updatable rule library covering system, container, network, security, and other inspections. Scheck is the abbreviation for Security Checker.