Process read another process's memory or registers
Cross-process access
- Subject
- observer_integration-bba318f4b94436b2
- Jobs
- build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
- Rule
- process-access
Evidence
Cross-process accesscause
via process_vm/proc-mem — read ×5
target cat
by /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
Process relationshipmitigation
The target is a child or ancestor of the accessing process.
Process detailscontext
actor: observer_integration-bba318f4b94436b2 (pid 2916) — /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
subject observer_integration-bba318f4b94436b2
Process detailscontext
target: cat (pid 2921) — cat /tmp/execsurface-m65-chain-2913
target cat
Processes
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
build-test
cargo›cargo›observer_integration-bba318f4b94436b2
- Ran
- /home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b2
- Invoked by
- cargo test --release --locked --no-fail-fast
Lineage · 3 processes
- cargocargo test --release --locked --no-fail-fast2716
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2836
- observer_integration-bba318f4b94436b2/home/runner/work/execsurface/execsurface/target/release/deps/observer_integration-bba318f4b94436b22916
Remediation
Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.