tetragon: log current lockdown security context

level=info msg="Tetragon current security context" AppArmor=unconfined Lockdown=none SELinux=unconfined Smack=

Signed-off-by: Djalal Harouni <tixxdz@gmail.com>

pkg/reader/proc/proc.go

@@ -277,11 +277,24 @@ func LogCurrentSecurityContext() {
 		}
 	}
 
+	lockdown := ""
+	data, err := os.ReadFile("/sys/kernel/security/lockdown")
+	if err == nil && len(data) > 0 {
+		values := strings.TrimSpace(string(data))
+		i := strings.Index(values, "[")
+		j := strings.Index(values, "]")
+		if i >= 0 && j > i {
+			lockdown = values[i+1 : j]
+			logLSM = true
+		}
+	}
+
 	if logLSM {
 		logger.GetLogger().WithFields(logrus.Fields{
 			"SELinux":  lsms["selinux"],
 			"AppArmor": lsms["apparmor"],
 			"Smack":    lsms["smack"],
+			"Lockdown": lockdown,
 		}).Info("Tetragon current security context")
 	}
 }