| Property |
Value |
| Binary Name |
kodachi-soc-notifier |
| Version |
9.8.4 |
| Build Date |
Not disclosed |
| Rust Version |
1.82.0 |
| File Size |
1.2MB |
| Author |
Warith Al Maawali |
| License |
Proprietary |
| Category |
Kodachi Binary |
| Description |
Bounded local user-session notifier for Kodachi host exposure findings |
| Git Commit |
unknown |
| Metadata Generated |
2026-08-10T13:22:57Z |
| Binary Timestamp |
Unknown |
| JSON Data |
View Raw JSON |
SHA256 Checksum
4061e507507f63d5261397cca98155cf7ccfdcf5cb507b686d85f3fd200d0552
Features
| # |
Feature |
| 1 |
Dashboard-independent visual delivery for unread warning and critical findings |
| 2 |
Fail-visible degraded, untrusted, unsupported, stale, malformed, and unavailable coverage alerts |
| 3 |
Strict schema, freshness, size, path-ownership, and subprocess-timeout validation |
| 4 |
Bounded delivered-ID memory with retry after temporary session-bus failure |
| 5 |
No network client, payload capture, telemetry, approval, or containment actions |
| 6 |
Kodachi-standard help, info, version, examples, and JSON output via cli-core |
Security Features
| Feature |
Description |
| Authentication |
Root-owned local kodachi-soc consumer path; no remote authentication |
| Encryption |
Not applicable; local metadata and session-bus delivery only |
| Input Validation |
Schema, size, freshness, path ownership, and local evidence trust validation |
| Rate Limiting |
One-second bounded polling with critical-first notification burst limits |
System Requirements
| Requirement |
Value |
| OS |
Kodachi OS/Linux with a graphical systemd user session |
| Privileges |
Unprivileged user session; no root or sudo required |
| Dependencies |
kodachi-soc exposure summary, notify-send, graphical D-Bus notification service |
Global Options
| Flag |
Description |
-h, --help |
Print help information |
-v, --version |
Print version information |
-n, --info |
Display detailed information |
-e, --examples |
Show usage examples |
--json |
Output in JSON format |
-o, --output-format <FORMAT> |
Force output format (text|json) |
--json-pretty |
Pretty-print JSON output with indentation |
--json-human |
Enhanced JSON output with improved formatting (like jq) |
Operational Scenarios
Scenario-oriented workflows generated from the binary's built-in -e --json examples.
Scenario 1: Session Notifier
The notifier is an unprivileged graphical-session consumer of the local kodachi-soc exposure summary. It delivers visual warning, critical, degraded, untrusted, and unsupported alerts while the dashboard is closed. It does not inspect traffic, read socket payloads, contact reputation services, acknowledge findings, approve behavior, terminate processes, block endpoints, isolate networking, or alter firewall rules. The watcher remains the sole authority for rule IDs, severity, deduplication, retained evidence, and unread state. The user service is bounded by MemoryHigh=24M, MemoryMax=32M, CPUQuota=5%, OOMScoreAdjust=500, and TasksMax=32.
Step 1: Show the notifier contract, privacy boundary, and resource cage
Expected Output: Kodachi-standard text help generated by cli-core
Note
The systemd user service normally starts the notifier.
kodachi-soc-notifier -n --json
A schema-versioned cli-core information envelope
kodachi-soc-notifier -e --json-pretty
A cli-core examples envelope with the session-notifier category
Step 4: Run the foreground notification loop for service-manager use
Expected Output: No normal stdout; visual alerts are delivered through the local session bus
Note
Use the installed systemd user unit for normal operation; Ctrl+C stops a foreground diagnostic run.
Environment Variables
| Variable |
Description |
Default |
Values |
NO_COLOR |
Disable all colored output when set |
unset |
1|true|yes (any value disables color) |
Exit Codes
| Code |
Description |
| 0 |
Success |
| 1 |
General error |
| 2 |
Invalid arguments |
| 3 |
Permission denied |
| 4 |
Network error |
| 5 |
File not found |