RuntimeProtect

About

RuntimeProtect is a big part of Keiko that's made up of modules whose purpose is to protect your server while it is running ("at run-time"). Sometimes, RuntimeProtect modules duplicate Keiko's static inspections, checking basically the same behavior, but at run-time. But in most cases, RuntimeProtect is more powerful, and, when properly configured, can let you relax almost completely.

Modules

RuntimeProtect consists of the following modules:

• Domain Access Control (DAC) — controls plugins' run-time permissions;
• Keiko Megane — monitors plugins' behavior to detect potential threats at run-time.

Configuration

All RuntimeProtect modules have their own sections inside the runtimeprotect.yml config file.