mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-22 03:49:36 +00:00
Change license to Apache 2.0 (#419)
Replace references to GNU Public License to Apache license in: - COPYING file - README - all source code below falco - rules files - rules and code below test directory - code below falco directory - entrypoint for docker containers (but not the Dockerfiles) I didn't generally add copyright notices to all the examples files, as they aren't core falco. If they did refer to the gpl I changed them to apache.
This commit is contained in:
@@ -459,7 +459,7 @@ set(CPACK_DEBIAN_PACKAGE_HOMEPAGE "http://www.sysdig.org")
|
|||||||
set(CPACK_DEBIAN_PACKAGE_DEPENDS "dkms (>= 2.1.0.0)")
|
set(CPACK_DEBIAN_PACKAGE_DEPENDS "dkms (>= 2.1.0.0)")
|
||||||
set(CPACK_DEBIAN_PACKAGE_CONTROL_EXTRA "${CMAKE_BINARY_DIR}/scripts/debian/postinst;${CMAKE_BINARY_DIR}/scripts/debian/prerm;${PROJECT_SOURCE_DIR}/scripts/debian/postrm;${PROJECT_SOURCE_DIR}/cpack/debian/conffiles")
|
set(CPACK_DEBIAN_PACKAGE_CONTROL_EXTRA "${CMAKE_BINARY_DIR}/scripts/debian/postinst;${CMAKE_BINARY_DIR}/scripts/debian/prerm;${PROJECT_SOURCE_DIR}/scripts/debian/postrm;${PROJECT_SOURCE_DIR}/cpack/debian/conffiles")
|
||||||
|
|
||||||
set(CPACK_RPM_PACKAGE_LICENSE "GPLv2")
|
set(CPACK_RPM_PACKAGE_LICENSE "Apache v2.0")
|
||||||
set(CPACK_RPM_PACKAGE_URL "http://www.sysdig.org")
|
set(CPACK_RPM_PACKAGE_URL "http://www.sysdig.org")
|
||||||
set(CPACK_RPM_PACKAGE_REQUIRES "dkms, gcc, make, kernel-devel, perl")
|
set(CPACK_RPM_PACKAGE_REQUIRES "dkms, gcc, make, kernel-devel, perl")
|
||||||
set(CPACK_RPM_POST_INSTALL_SCRIPT_FILE "${PROJECT_SOURCE_DIR}/scripts/rpm/postinstall")
|
set(CPACK_RPM_POST_INSTALL_SCRIPT_FILE "${PROJECT_SOURCE_DIR}/scripts/rpm/postinstall")
|
||||||
|
475
COPYING
475
COPYING
@@ -1,339 +1,202 @@
|
|||||||
GNU GENERAL PUBLIC LICENSE
|
|
||||||
Version 2, June 1991
|
|
||||||
|
|
||||||
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
|
Apache License
|
||||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
Version 2.0, January 2004
|
||||||
Everyone is permitted to copy and distribute verbatim copies
|
http://www.apache.org/licenses/
|
||||||
of this license document, but changing it is not allowed.
|
|
||||||
|
|
||||||
Preamble
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
The licenses for most software are designed to take away your
|
1. Definitions.
|
||||||
freedom to share and change it. By contrast, the GNU General Public
|
|
||||||
License is intended to guarantee your freedom to share and change free
|
|
||||||
software--to make sure the software is free for all its users. This
|
|
||||||
General Public License applies to most of the Free Software
|
|
||||||
Foundation's software and to any other program whose authors commit to
|
|
||||||
using it. (Some other Free Software Foundation software is covered by
|
|
||||||
the GNU Lesser General Public License instead.) You can apply it to
|
|
||||||
your programs, too.
|
|
||||||
|
|
||||||
When we speak of free software, we are referring to freedom, not
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
price. Our General Public Licenses are designed to make sure that you
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
have the freedom to distribute copies of free software (and charge for
|
|
||||||
this service if you wish), that you receive source code or can get it
|
|
||||||
if you want it, that you can change the software or use pieces of it
|
|
||||||
in new free programs; and that you know you can do these things.
|
|
||||||
|
|
||||||
To protect your rights, we need to make restrictions that forbid
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
anyone to deny you these rights or to ask you to surrender the rights.
|
the copyright owner that is granting the License.
|
||||||
These restrictions translate to certain responsibilities for you if you
|
|
||||||
distribute copies of the software, or if you modify it.
|
|
||||||
|
|
||||||
For example, if you distribute copies of such a program, whether
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
gratis or for a fee, you must give the recipients all the rights that
|
other entities that control, are controlled by, or are under common
|
||||||
you have. You must make sure that they, too, receive or can get the
|
control with that entity. For the purposes of this definition,
|
||||||
source code. And you must show them these terms so they know their
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
rights.
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
We protect your rights with two steps: (1) copyright the software, and
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
(2) offer you this license which gives you legal permission to copy,
|
exercising permissions granted by this License.
|
||||||
distribute and/or modify the software.
|
|
||||||
|
|
||||||
Also, for each author's protection and ours, we want to make certain
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
that everyone understands that there is no warranty for this free
|
including but not limited to software source code, documentation
|
||||||
software. If the software is modified by someone else and passed on, we
|
source, and configuration files.
|
||||||
want its recipients to know that what they have is not the original, so
|
|
||||||
that any problems introduced by others will not reflect on the original
|
|
||||||
authors' reputations.
|
|
||||||
|
|
||||||
Finally, any free program is threatened constantly by software
|
"Object" form shall mean any form resulting from mechanical
|
||||||
patents. We wish to avoid the danger that redistributors of a free
|
transformation or translation of a Source form, including but
|
||||||
program will individually obtain patent licenses, in effect making the
|
not limited to compiled object code, generated documentation,
|
||||||
program proprietary. To prevent this, we have made it clear that any
|
and conversions to other media types.
|
||||||
patent must be licensed for everyone's free use or not licensed at all.
|
|
||||||
|
|
||||||
The precise terms and conditions for copying, distribution and
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
modification follow.
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
GNU GENERAL PUBLIC LICENSE
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
0. This License applies to any program or other work which contains
|
"Contribution" shall mean any work of authorship, including
|
||||||
a notice placed by the copyright holder saying it may be distributed
|
the original version of the Work and any modifications or additions
|
||||||
under the terms of this General Public License. The "Program", below,
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
refers to any such program or work, and a "work based on the Program"
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
means either the Program or any derivative work under copyright law:
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
that is to say, a work containing the Program or a portion of it,
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
either verbatim or with modifications and/or translated into another
|
means any form of electronic, verbal, or written communication sent
|
||||||
language. (Hereinafter, translation is included without limitation in
|
to the Licensor or its representatives, including but not limited to
|
||||||
the term "modification".) Each licensee is addressed as "you".
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
Activities other than copying, distribution and modification are not
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
covered by this License; they are outside its scope. The act of
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
running the Program is not restricted, and the output from the Program
|
subsequently incorporated within the Work.
|
||||||
is covered only if its contents constitute a work based on the
|
|
||||||
Program (independent of having been made by running the Program).
|
|
||||||
Whether that is true depends on what the Program does.
|
|
||||||
|
|
||||||
1. You may copy and distribute verbatim copies of the Program's
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
source code as you receive it, in any medium, provided that you
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
conspicuously and appropriately publish on each copy an appropriate
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
copyright notice and disclaimer of warranty; keep intact all the
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
notices that refer to this License and to the absence of any warranty;
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
and give any other recipients of the Program a copy of this License
|
Work and such Derivative Works in Source or Object form.
|
||||||
along with the Program.
|
|
||||||
|
|
||||||
You may charge a fee for the physical act of transferring a copy, and
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
you may at your option offer warranty protection in exchange for a fee.
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
2. You may modify your copy or copies of the Program or any portion
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
of it, thus forming a work based on the Program, and copy and
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
distribute such modifications or work under the terms of Section 1
|
modifications, and in Source or Object form, provided that You
|
||||||
above, provided that you also meet all of these conditions:
|
meet the following conditions:
|
||||||
|
|
||||||
a) You must cause the modified files to carry prominent notices
|
(a) You must give any other recipients of the Work or
|
||||||
stating that you changed the files and the date of any change.
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
b) You must cause any work that you distribute or publish, that in
|
(b) You must cause any modified files to carry prominent notices
|
||||||
whole or in part contains or is derived from the Program or any
|
stating that You changed the files; and
|
||||||
part thereof, to be licensed as a whole at no charge to all third
|
|
||||||
parties under the terms of this License.
|
|
||||||
|
|
||||||
c) If the modified program normally reads commands interactively
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
when run, you must cause it, when started running for such
|
that You distribute, all copyright, patent, trademark, and
|
||||||
interactive use in the most ordinary way, to print or display an
|
attribution notices from the Source form of the Work,
|
||||||
announcement including an appropriate copyright notice and a
|
excluding those notices that do not pertain to any part of
|
||||||
notice that there is no warranty (or else, saying that you provide
|
the Derivative Works; and
|
||||||
a warranty) and that users may redistribute the program under
|
|
||||||
these conditions, and telling the user how to view a copy of this
|
|
||||||
License. (Exception: if the Program itself is interactive but
|
|
||||||
does not normally print such an announcement, your work based on
|
|
||||||
the Program is not required to print an announcement.)
|
|
||||||
|
|
||||||
These requirements apply to the modified work as a whole. If
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
identifiable sections of that work are not derived from the Program,
|
distribution, then any Derivative Works that You distribute must
|
||||||
and can be reasonably considered independent and separate works in
|
include a readable copy of the attribution notices contained
|
||||||
themselves, then this License, and its terms, do not apply to those
|
within such NOTICE file, excluding those notices that do not
|
||||||
sections when you distribute them as separate works. But when you
|
pertain to any part of the Derivative Works, in at least one
|
||||||
distribute the same sections as part of a whole which is a work based
|
of the following places: within a NOTICE text file distributed
|
||||||
on the Program, the distribution of the whole must be on the terms of
|
as part of the Derivative Works; within the Source form or
|
||||||
this License, whose permissions for other licensees extend to the
|
documentation, if provided along with the Derivative Works; or,
|
||||||
entire whole, and thus to each and every part regardless of who wrote it.
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
Thus, it is not the intent of this section to claim rights or contest
|
You may add Your own copyright statement to Your modifications and
|
||||||
your rights to work written entirely by you; rather, the intent is to
|
may provide additional or different license terms and conditions
|
||||||
exercise the right to control the distribution of derivative or
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
collective works based on the Program.
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
In addition, mere aggregation of another work not based on the Program
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
with the Program (or with a work based on the Program) on a volume of
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
a storage or distribution medium does not bring the other work under
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
the scope of this License.
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
3. You may copy and distribute the Program (or a work based on it,
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
under Section 2) in object code or executable form under the terms of
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
Sections 1 and 2 above provided that you also do one of the following:
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
a) Accompany it with the complete corresponding machine-readable
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
source code, which must be distributed under the terms of Sections
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
1 and 2 above on a medium customarily used for software interchange; or,
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
b) Accompany it with a written offer, valid for at least three
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
years, to give any third party, for a charge no more than your
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
cost of physically performing source distribution, a complete
|
unless required by applicable law (such as deliberate and grossly
|
||||||
machine-readable copy of the corresponding source code, to be
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
distributed under the terms of Sections 1 and 2 above on a medium
|
liable to You for damages, including any direct, indirect, special,
|
||||||
customarily used for software interchange; or,
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
c) Accompany it with the information you received as to the offer
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
to distribute corresponding source code. (This alternative is
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
allowed only for noncommercial distribution and only if you
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
received the program in object code or executable form with such
|
or other liability obligations and/or rights consistent with this
|
||||||
an offer, in accord with Subsection b above.)
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
The source code for a work means the preferred form of the work for
|
END OF TERMS AND CONDITIONS
|
||||||
making modifications to it. For an executable work, complete source
|
|
||||||
code means all the source code for all modules it contains, plus any
|
|
||||||
associated interface definition files, plus the scripts used to
|
|
||||||
control compilation and installation of the executable. However, as a
|
|
||||||
special exception, the source code distributed need not include
|
|
||||||
anything that is normally distributed (in either source or binary
|
|
||||||
form) with the major components (compiler, kernel, and so on) of the
|
|
||||||
operating system on which the executable runs, unless that component
|
|
||||||
itself accompanies the executable.
|
|
||||||
|
|
||||||
If distribution of executable or object code is made by offering
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
access to copy from a designated place, then offering equivalent
|
|
||||||
access to copy the source code from the same place counts as
|
|
||||||
distribution of the source code, even though third parties are not
|
|
||||||
compelled to copy the source along with the object code.
|
|
||||||
|
|
||||||
4. You may not copy, modify, sublicense, or distribute the Program
|
To apply the Apache License to your work, attach the following
|
||||||
except as expressly provided under this License. Any attempt
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
otherwise to copy, modify, sublicense or distribute the Program is
|
replaced with your own identifying information. (Don't include
|
||||||
void, and will automatically terminate your rights under this License.
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
However, parties who have received copies, or rights, from you under
|
comment syntax for the file format. We also recommend that a
|
||||||
this License will not have their licenses terminated so long as such
|
file or class name and description of purpose be included on the
|
||||||
parties remain in full compliance.
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
5. You are not required to accept this License, since you have not
|
Copyright [yyyy] [name of copyright owner]
|
||||||
signed it. However, nothing else grants you permission to modify or
|
|
||||||
distribute the Program or its derivative works. These actions are
|
|
||||||
prohibited by law if you do not accept this License. Therefore, by
|
|
||||||
modifying or distributing the Program (or any work based on the
|
|
||||||
Program), you indicate your acceptance of this License to do so, and
|
|
||||||
all its terms and conditions for copying, distributing or modifying
|
|
||||||
the Program or works based on it.
|
|
||||||
|
|
||||||
6. Each time you redistribute the Program (or any work based on the
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
Program), the recipient automatically receives a license from the
|
you may not use this file except in compliance with the License.
|
||||||
original licensor to copy, distribute or modify the Program subject to
|
You may obtain a copy of the License at
|
||||||
these terms and conditions. You may not impose any further
|
|
||||||
restrictions on the recipients' exercise of the rights granted herein.
|
|
||||||
You are not responsible for enforcing compliance by third parties to
|
|
||||||
this License.
|
|
||||||
|
|
||||||
7. If, as a consequence of a court judgment or allegation of patent
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
infringement or for any other reason (not limited to patent issues),
|
|
||||||
conditions are imposed on you (whether by court order, agreement or
|
|
||||||
otherwise) that contradict the conditions of this License, they do not
|
|
||||||
excuse you from the conditions of this License. If you cannot
|
|
||||||
distribute so as to satisfy simultaneously your obligations under this
|
|
||||||
License and any other pertinent obligations, then as a consequence you
|
|
||||||
may not distribute the Program at all. For example, if a patent
|
|
||||||
license would not permit royalty-free redistribution of the Program by
|
|
||||||
all those who receive copies directly or indirectly through you, then
|
|
||||||
the only way you could satisfy both it and this License would be to
|
|
||||||
refrain entirely from distribution of the Program.
|
|
||||||
|
|
||||||
If any portion of this section is held invalid or unenforceable under
|
Unless required by applicable law or agreed to in writing, software
|
||||||
any particular circumstance, the balance of the section is intended to
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
apply and the section as a whole is intended to apply in other
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
circumstances.
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
It is not the purpose of this section to induce you to infringe any
|
|
||||||
patents or other property right claims or to contest validity of any
|
|
||||||
such claims; this section has the sole purpose of protecting the
|
|
||||||
integrity of the free software distribution system, which is
|
|
||||||
implemented by public license practices. Many people have made
|
|
||||||
generous contributions to the wide range of software distributed
|
|
||||||
through that system in reliance on consistent application of that
|
|
||||||
system; it is up to the author/donor to decide if he or she is willing
|
|
||||||
to distribute software through any other system and a licensee cannot
|
|
||||||
impose that choice.
|
|
||||||
|
|
||||||
This section is intended to make thoroughly clear what is believed to
|
|
||||||
be a consequence of the rest of this License.
|
|
||||||
|
|
||||||
8. If the distribution and/or use of the Program is restricted in
|
|
||||||
certain countries either by patents or by copyrighted interfaces, the
|
|
||||||
original copyright holder who places the Program under this License
|
|
||||||
may add an explicit geographical distribution limitation excluding
|
|
||||||
those countries, so that distribution is permitted only in or among
|
|
||||||
countries not thus excluded. In such case, this License incorporates
|
|
||||||
the limitation as if written in the body of this License.
|
|
||||||
|
|
||||||
9. The Free Software Foundation may publish revised and/or new versions
|
|
||||||
of the General Public License from time to time. Such new versions will
|
|
||||||
be similar in spirit to the present version, but may differ in detail to
|
|
||||||
address new problems or concerns.
|
|
||||||
|
|
||||||
Each version is given a distinguishing version number. If the Program
|
|
||||||
specifies a version number of this License which applies to it and "any
|
|
||||||
later version", you have the option of following the terms and conditions
|
|
||||||
either of that version or of any later version published by the Free
|
|
||||||
Software Foundation. If the Program does not specify a version number of
|
|
||||||
this License, you may choose any version ever published by the Free Software
|
|
||||||
Foundation.
|
|
||||||
|
|
||||||
10. If you wish to incorporate parts of the Program into other free
|
|
||||||
programs whose distribution conditions are different, write to the author
|
|
||||||
to ask for permission. For software which is copyrighted by the Free
|
|
||||||
Software Foundation, write to the Free Software Foundation; we sometimes
|
|
||||||
make exceptions for this. Our decision will be guided by the two goals
|
|
||||||
of preserving the free status of all derivatives of our free software and
|
|
||||||
of promoting the sharing and reuse of software generally.
|
|
||||||
|
|
||||||
NO WARRANTY
|
|
||||||
|
|
||||||
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
|
|
||||||
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
|
|
||||||
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
|
|
||||||
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
|
|
||||||
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
||||||
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
|
|
||||||
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
|
|
||||||
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
|
|
||||||
REPAIR OR CORRECTION.
|
|
||||||
|
|
||||||
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
|
||||||
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
|
|
||||||
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
|
|
||||||
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
|
|
||||||
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
|
|
||||||
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
|
|
||||||
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
|
|
||||||
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
|
|
||||||
POSSIBILITY OF SUCH DAMAGES.
|
|
||||||
|
|
||||||
END OF TERMS AND CONDITIONS
|
|
||||||
|
|
||||||
How to Apply These Terms to Your New Programs
|
|
||||||
|
|
||||||
If you develop a new program, and you want it to be of the greatest
|
|
||||||
possible use to the public, the best way to achieve this is to make it
|
|
||||||
free software which everyone can redistribute and change under these terms.
|
|
||||||
|
|
||||||
To do so, attach the following notices to the program. It is safest
|
|
||||||
to attach them to the start of each source file to most effectively
|
|
||||||
convey the exclusion of warranty; and each file should have at least
|
|
||||||
the "copyright" line and a pointer to where the full notice is found.
|
|
||||||
|
|
||||||
<one line to give the program's name and a brief idea of what it does.>
|
|
||||||
Copyright (C) <year> <name of author>
|
|
||||||
|
|
||||||
This program is free software; you can redistribute it and/or modify
|
|
||||||
it under the terms of the GNU General Public License as published by
|
|
||||||
the Free Software Foundation; either version 2 of the License, or
|
|
||||||
(at your option) any later version.
|
|
||||||
|
|
||||||
This program is distributed in the hope that it will be useful,
|
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
GNU General Public License for more details.
|
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License along
|
|
||||||
with this program; if not, write to the Free Software Foundation, Inc.,
|
|
||||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
|
|
||||||
Also add information on how to contact you by electronic and paper mail.
|
|
||||||
|
|
||||||
If the program is interactive, make it output a short notice like this
|
|
||||||
when it starts in an interactive mode:
|
|
||||||
|
|
||||||
Gnomovision version 69, Copyright (C) year name of author
|
|
||||||
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
|
|
||||||
This is free software, and you are welcome to redistribute it
|
|
||||||
under certain conditions; type `show c' for details.
|
|
||||||
|
|
||||||
The hypothetical commands `show w' and `show c' should show the appropriate
|
|
||||||
parts of the General Public License. Of course, the commands you use may
|
|
||||||
be called something other than `show w' and `show c'; they could even be
|
|
||||||
mouse-clicks or menu items--whatever suits your program.
|
|
||||||
|
|
||||||
You should also get your employer (if you work as a programmer) or your
|
|
||||||
school, if any, to sign a "copyright disclaimer" for the program, if
|
|
||||||
necessary. Here is a sample; alter the names:
|
|
||||||
|
|
||||||
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
|
|
||||||
`Gnomovision' (which makes passes at compilers) written by James Hacker.
|
|
||||||
|
|
||||||
<signature of Ty Coon>, 1 April 1989
|
|
||||||
Ty Coon, President of Vice
|
|
||||||
|
|
||||||
This General Public License does not permit incorporating your program into
|
|
||||||
proprietary programs. If your program is a subroutine library, you may
|
|
||||||
consider it more useful to permit linking proprietary applications with the
|
|
||||||
library. If this is what you want to do, use the GNU Lesser General
|
|
||||||
Public License instead of this License.
|
|
||||||
|
@@ -39,11 +39,7 @@ Join the Community
|
|||||||
|
|
||||||
License Terms
|
License Terms
|
||||||
---
|
---
|
||||||
Falco is licensed to you under the [GPL 2.0](./COPYING) open source license.
|
Falco is licensed to you under the [Apache 2.0](./COPYING) open source license.
|
||||||
|
|
||||||
In addition, as a special exception, the copyright holders give permission to link the code of portions of this program with the OpenSSL library under certain conditions as described in each individual source file, and distribute linked combinations including the two.
|
|
||||||
|
|
||||||
You must obey the GNU General Public License in all respects for all of the code used other than OpenSSL. If you modify file(s) with this exception, you may extend this exception to your version of the file(s), but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version.
|
|
||||||
|
|
||||||
Contributor License Agreements
|
Contributor License Agreements
|
||||||
---
|
---
|
||||||
|
@@ -1,4 +1,22 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#set -e
|
#set -e
|
||||||
|
|
||||||
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <cstdio>
|
#include <cstdio>
|
||||||
|
@@ -1,4 +1,22 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#set -e
|
#set -e
|
||||||
|
|
||||||
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
||||||
|
@@ -1,4 +1,22 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#set -e
|
#set -e
|
||||||
|
|
||||||
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
# Set the SYSDIG_SKIP_LOAD variable to skip loading the sysdig kernel module
|
||||||
|
@@ -1,21 +1,22 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
#
|
#
|
||||||
# Copyright (C) 2013-2014 My Company inc.
|
# Copyright (C) 2018 Draios Inc.
|
||||||
#
|
#
|
||||||
# This file is part of my-software
|
# This file is part of falco.
|
||||||
#
|
#
|
||||||
# my-software is free software; you can redistribute it and/or modify
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
# it under the terms of the GNU General Public License version 2 as
|
# you may not use this file except in compliance with the License.
|
||||||
# published by the Free Software Foundation.
|
# You may obtain a copy of the License at
|
||||||
#
|
#
|
||||||
# my-software is distributed in the hope that it will be useful,
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
# GNU General Public License for more details.
|
|
||||||
#
|
#
|
||||||
# You should have received a copy of the GNU General Public License
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
# along with my-software. If not, see <http://www.gnu.org/licenses/>.
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
#
|
#
|
||||||
|
|
||||||
set -e
|
set -e
|
||||||
|
|
||||||
function install_rpm {
|
function install_rpm {
|
||||||
|
@@ -3,7 +3,7 @@
|
|||||||
"version": "0.1.0",
|
"version": "0.1.0",
|
||||||
"author": "sysdig",
|
"author": "sysdig",
|
||||||
"summary": "Sysdig Falco: Behavioral Activity Monitoring With Container Support",
|
"summary": "Sysdig Falco: Behavioral Activity Monitoring With Container Support",
|
||||||
"license": "GPLv2",
|
"license": "Apache v2.0",
|
||||||
"source": "https://github.com/draios/falco",
|
"source": "https://github.com/draios/falco",
|
||||||
"project_page": "https://github.com/draios/falco",
|
"project_page": "https://github.com/draios/falco",
|
||||||
"issues_url": "https://github.com/draios/falco/issues",
|
"issues_url": "https://github.com/draios/falco/issues",
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
################################################################
|
################################################################
|
||||||
# By default all application-related rules are disabled for
|
# By default all application-related rules are disabled for
|
||||||
# performance reasons. Depending on the application(s) you use,
|
# performance reasons. Depending on the application(s) you use,
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
####################
|
####################
|
||||||
# Your custom rules!
|
# Your custom rules!
|
||||||
####################
|
####################
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
# Currently disabled as read/write are ignored syscalls. The nearly
|
# Currently disabled as read/write are ignored syscalls. The nearly
|
||||||
# similar open_write/open_read check for files being opened for
|
# similar open_write/open_read check for files being opened for
|
||||||
# reading/writing.
|
# reading/writing.
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
cat ../sysdig/userspace/libscap/syscall_info_table.c | grep EF_DROP_FALCO | sed -e 's/.*\"\(.*\)\".*/\1/' | sort > ignored_syscall_info_table.txt
|
cat ../sysdig/userspace/libscap/syscall_info_table.c | grep EF_DROP_FALCO | sed -e 's/.*\"\(.*\)\".*/\1/' | sort > ignored_syscall_info_table.txt
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
#
|
#
|
||||||
# falco syscall monitoring agent
|
# falco syscall monitoring agent
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
dkms add -m falco -v %{version} --rpm_safe_upgrade
|
dkms add -m falco -v %{version} --rpm_safe_upgrade
|
||||||
if [ `uname -r | grep -c "BOOT"` -eq 0 ] && [ -e /lib/modules/`uname -r`/build/include ]; then
|
if [ `uname -r | grep -c "BOOT"` -eq 0 ] && [ -e /lib/modules/`uname -r`/build/include ]; then
|
||||||
dkms build -m falco -v %{version}
|
dkms build -m falco -v %{version}
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
if [ "$1" -ge "1" ]; then
|
if [ "$1" -ge "1" ]; then
|
||||||
/sbin/service falco condrestart > /dev/null 2>&1
|
/sbin/service falco condrestart > /dev/null 2>&1
|
||||||
fi
|
fi
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
if [ $1 = 0 ]; then
|
if [ $1 = 0 ]; then
|
||||||
/sbin/service falco stop > /dev/null 2>&1
|
/sbin/service falco stop > /dev/null 2>&1
|
||||||
/sbin/chkconfig --del falco
|
/sbin/chkconfig --del falco
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
# File containing Falco rules, loaded at startup.
|
# File containing Falco rules, loaded at startup.
|
||||||
rules_file: /etc/falco_rules.yaml
|
rules_file: /etc/falco_rules.yaml
|
||||||
|
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
# File containing Falco rules, loaded at startup.
|
# File containing Falco rules, loaded at startup.
|
||||||
rules_file: /etc/falco_rules.yaml
|
rules_file: /etc/falco_rules.yaml
|
||||||
|
|
||||||
|
@@ -1,4 +1,21 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
SUBJ_PID=$1
|
SUBJ_PID=$1
|
||||||
BENCHMARK=$2
|
BENCHMARK=$2
|
||||||
|
@@ -1,5 +1,21 @@
|
|||||||
#!/usr/bin/env python
|
#!/usr/bin/env python
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
import os
|
import os
|
||||||
import re
|
import re
|
||||||
import json
|
import json
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
trace_files: !mux
|
trace_files: !mux
|
||||||
|
|
||||||
docker_package:
|
docker_package:
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
has_json_output: !mux
|
has_json_output: !mux
|
||||||
yes:
|
yes:
|
||||||
json_output: True
|
json_output: True
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
require(jsonlite)
|
require(jsonlite)
|
||||||
library(ggplot2)
|
library(ggplot2)
|
||||||
library(GetoptLong)
|
library(GetoptLong)
|
||||||
|
@@ -1,3 +1,21 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
require(jsonlite)
|
require(jsonlite)
|
||||||
library(ggplot2)
|
library(ggplot2)
|
||||||
library(reshape)
|
library(reshape)
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: open_from_cat
|
- rule: open_from_cat
|
||||||
append: true
|
append: true
|
||||||
condition: and fd.name=/tmp
|
condition: and fd.name=/tmp
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: open_dev_null
|
- rule: open_dev_null
|
||||||
desc: Any open of the file /dev/null
|
desc: Any open of the file /dev/null
|
||||||
condition: evt.type=open and fd.name=/dev/null
|
condition: evt.type=open and fd.name=/dev/null
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: Localhost connect
|
- rule: Localhost connect
|
||||||
desc: Detect any connect to the localhost network, using fd.net and the in operator
|
desc: Detect any connect to the localhost network, using fd.net and the in operator
|
||||||
condition: evt.type=connect and fd.net in ("127.0.0.1/24")
|
condition: evt.type=connect and fd.net in ("127.0.0.1/24")
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
# This ruleset depends on the is_cat macro defined in single_rule.yaml
|
# This ruleset depends on the is_cat macro defined in single_rule.yaml
|
||||||
|
|
||||||
- rule: exec_from_cat
|
- rule: exec_from_cat
|
||||||
|
@@ -0,0 +1,17 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: no_warnings
|
- rule: no_warnings
|
||||||
desc: Rule with no warnings
|
desc: Rule with no warnings
|
||||||
condition: evt.type=execve
|
condition: evt.type=execve
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: rule_with_invalid_output
|
- rule: rule_with_invalid_output
|
||||||
desc: A rule with an invalid output field
|
desc: A rule with an invalid output field
|
||||||
condition: evt.type=open
|
condition: evt.type=open
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: my_list
|
- list: my_list
|
||||||
items: [not-cat]
|
items: [not-cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: my_list
|
- list: my_list
|
||||||
items: [not-cat]
|
items: [not-cat]
|
||||||
append: true
|
append: true
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: my_list
|
- list: my_list
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [not_cat]
|
items: [not_cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: my_list
|
- list: my_list
|
||||||
items: ['"one string"']
|
items: ['"one string"']
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: my_macro
|
- macro: my_macro
|
||||||
condition: proc.name=not-cat
|
condition: proc.name=not-cat
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: my_macro
|
- macro: my_macro
|
||||||
condition: proc.name=not-cat
|
condition: proc.name=not-cat
|
||||||
append: true
|
append: true
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: my_macro
|
- macro: my_macro
|
||||||
condition: proc.name=cat
|
condition: proc.name=cat
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: open_from_cat
|
- rule: open_from_cat
|
||||||
desc: A process named cat does an open
|
desc: A process named cat does an open
|
||||||
condition: evt.type=open and proc.name=cat
|
condition: evt.type=open and proc.name=cat
|
||||||
|
@@ -1,2 +1,19 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_capable_binaries
|
- list: cat_capable_binaries
|
||||||
items: [not-cat]
|
items: [not-cat]
|
@@ -1,2 +1,19 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: is_cat
|
- macro: is_cat
|
||||||
condition: proc.name in (not-cat)
|
condition: proc.name in (not-cat)
|
||||||
|
@@ -1,2 +1,19 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [not-cat]
|
items: [not-cat]
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: open_from_cat
|
- rule: open_from_cat
|
||||||
desc: A process named cat does an open
|
desc: A process named cat does an open
|
||||||
condition: evt.type=open and proc.name=not-cat
|
condition: evt.type=open and proc.name=not-cat
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: my_rule
|
- rule: my_rule
|
||||||
desc: A process named cat does an open
|
desc: A process named cat does an open
|
||||||
condition: evt.type=open and fd.name=not-a-real-file
|
condition: evt.type=open and fd.name=not-a-real-file
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: my_rule
|
- rule: my_rule
|
||||||
condition: evt.type=open
|
condition: evt.type=open
|
||||||
append: true
|
append: true
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: my_rule
|
- rule: my_rule
|
||||||
desc: A process named cat does an open
|
desc: A process named cat does an open
|
||||||
condition: evt.type=open and fd.name=/dev/null
|
condition: evt.type=open and fd.name=/dev/null
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: is_cat
|
- macro: is_cat
|
||||||
condition: proc.name=cat
|
condition: proc.name=cat
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- list: cat_binaries
|
- list: cat_binaries
|
||||||
items: [cat]
|
items: [cat]
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: is_cat
|
- macro: is_cat
|
||||||
condition: proc.name=cat
|
condition: proc.name=cat
|
||||||
|
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: Contains Unknown Event And Not Skipping
|
- rule: Contains Unknown Event And Not Skipping
|
||||||
desc: Contains an unknown event
|
desc: Contains an unknown event
|
||||||
condition: proc.nobody=cat
|
condition: proc.nobody=cat
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: Contains Unknown Event And Skipping
|
- rule: Contains Unknown Event And Skipping
|
||||||
desc: Contains an unknown event
|
desc: Contains an unknown event
|
||||||
condition: evt.type=open and proc.nobody=cat
|
condition: evt.type=open and proc.nobody=cat
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: Contains Prefix of Filter
|
- rule: Contains Prefix of Filter
|
||||||
desc: Testing matching filter prefixes
|
desc: Testing matching filter prefixes
|
||||||
condition: >
|
condition: >
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: Contains Unknown Event And Unspecified
|
- rule: Contains Unknown Event And Unspecified
|
||||||
desc: Contains an unknown event
|
desc: Contains an unknown event
|
||||||
condition: proc.nobody=cat
|
condition: proc.nobody=cat
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- rule: detect_madvise
|
- rule: detect_madvise
|
||||||
desc: Detect any call to madvise
|
desc: Detect any call to madvise
|
||||||
condition: evt.type=madvise and evt.dir=<
|
condition: evt.type=madvise and evt.dir=<
|
||||||
|
@@ -1,3 +1,20 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
- macro: open_read
|
- macro: open_read
|
||||||
condition: (evt.type=open or evt.type=openat) and evt.is_open_read=true and fd.typechar='f'
|
condition: (evt.type=open or evt.type=openat) and evt.is_open_read=true and fd.typechar='f'
|
||||||
|
|
||||||
|
@@ -1,4 +1,21 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
#set -x
|
#set -x
|
||||||
|
|
||||||
|
@@ -1,5 +1,21 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
SCRIPT=$(readlink -f $0)
|
SCRIPT=$(readlink -f $0)
|
||||||
SCRIPTDIR=$(dirname $SCRIPT)
|
SCRIPTDIR=$(dirname $SCRIPT)
|
||||||
BRANCH=$1
|
BRANCH=$1
|
||||||
|
@@ -1,4 +1,21 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# Copyright (C) 2018 Draios Inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
# Run sysdig excluding all events that aren't used by falco and also
|
# Run sysdig excluding all events that aren't used by falco and also
|
||||||
# excluding other high-volume events that aren't essential. This
|
# excluding other high-volume events that aren't essential. This
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <fstream>
|
#include <fstream>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <cstdlib>
|
#include <cstdlib>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <json/json.h>
|
#include <json/json.h>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,3 +1,22 @@
|
|||||||
|
/*
|
||||||
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
|
This file is part of falco.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
|
||||||
#include "lua.h"
|
#include "lua.h"
|
||||||
|
@@ -1,19 +1,18 @@
|
|||||||
--
|
-- Copyright (C) 2018 Draios inc.
|
||||||
-- Copyright (C) 2016 Draios inc.
|
|
||||||
--
|
--
|
||||||
-- This file is part of falco.
|
-- This file is part of falco.
|
||||||
--
|
--
|
||||||
-- falco is free software; you can redistribute it and/or modify
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
-- it under the terms of the GNU General Public License version 2 as
|
-- you may not use this file except in compliance with the License.
|
||||||
-- published by the Free Software Foundation.
|
-- You may obtain a copy of the License at
|
||||||
--
|
--
|
||||||
-- falco is distributed in the hope that it will be useful,
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||||
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
-- GNU General Public License for more details.
|
|
||||||
--
|
--
|
||||||
-- You should have received a copy of the GNU General Public License
|
-- Unless required by applicable law or agreed to in writing, software
|
||||||
-- along with falco. If not, see <http://www.gnu.org/licenses/>.
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
-- See the License for the specific language governing permissions and
|
||||||
|
-- limitations under the License.
|
||||||
|
|
||||||
local parser = require("parser")
|
local parser = require("parser")
|
||||||
local compiler = {}
|
local compiler = {}
|
||||||
|
@@ -1,3 +1,19 @@
|
|||||||
|
# Copyright (C) 2018 Draios inc.
|
||||||
|
#
|
||||||
|
# This file is part of falco.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
function error_exit_good
|
function error_exit_good
|
||||||
|
@@ -1,19 +1,19 @@
|
|||||||
--
|
-- Copyright (C) 2018 Draios inc.
|
||||||
-- Copyright (C) 2016 Draios inc.
|
|
||||||
--
|
--
|
||||||
-- This file is part of falco.
|
-- This file is part of falco.
|
||||||
--
|
--
|
||||||
-- falco is free software; you can redistribute it and/or modify
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
-- it under the terms of the GNU General Public License version 2 as
|
-- you may not use this file except in compliance with the License.
|
||||||
-- published by the Free Software Foundation.
|
-- You may obtain a copy of the License at
|
||||||
--
|
--
|
||||||
-- falco is distributed in the hope that it will be useful,
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||||
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
--
|
||||||
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
-- Unless required by applicable law or agreed to in writing, software
|
||||||
-- GNU General Public License for more details.
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
-- See the License for the specific language governing permissions and
|
||||||
|
-- limitations under the License.
|
||||||
--
|
--
|
||||||
-- You should have received a copy of the GNU General Public License
|
|
||||||
-- along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
--[[
|
--[[
|
||||||
Falco grammar and parser.
|
Falco grammar and parser.
|
||||||
|
@@ -1,19 +1,19 @@
|
|||||||
--
|
-- Copyright (C) 2018 Draios inc.
|
||||||
-- Copyright (C) 2016 Draios inc.
|
|
||||||
--
|
--
|
||||||
-- This file is part of falco.
|
-- This file is part of falco.
|
||||||
--
|
--
|
||||||
-- falco is free software; you can redistribute it and/or modify
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
-- it under the terms of the GNU General Public License version 2 as
|
-- you may not use this file except in compliance with the License.
|
||||||
-- published by the Free Software Foundation.
|
-- You may obtain a copy of the License at
|
||||||
--
|
--
|
||||||
-- falco is distributed in the hope that it will be useful,
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||||
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
--
|
||||||
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
-- Unless required by applicable law or agreed to in writing, software
|
||||||
-- GNU General Public License for more details.
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
-- See the License for the specific language governing permissions and
|
||||||
|
-- limitations under the License.
|
||||||
--
|
--
|
||||||
-- You should have received a copy of the GNU General Public License
|
|
||||||
-- along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
--[[
|
--[[
|
||||||
Compile and install falco rules.
|
Compile and install falco rules.
|
||||||
|
@@ -1,3 +1,22 @@
|
|||||||
|
/*
|
||||||
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
|
This file is part of falco.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
|
||||||
#include "lua.h"
|
#include "lua.h"
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include "rules.h"
|
#include "rules.h"
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <cstddef>
|
#include <cstddef>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,3 +1,22 @@
|
|||||||
|
/*
|
||||||
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
|
This file is part of falco.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
|
||||||
#define FALCO_VERSION "${FALCO_VERSION}"
|
#define FALCO_VERSION "${FALCO_VERSION}"
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <algorithm>
|
#include <algorithm>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#define __STDC_FORMAT_MACROS
|
#define __STDC_FORMAT_MACROS
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include "falco_outputs.h"
|
#include "falco_outputs.h"
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <ctime>
|
#include <ctime>
|
||||||
|
@@ -1,19 +1,20 @@
|
|||||||
/*
|
/*
|
||||||
Copyright (C) 2016 Draios inc.
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
This file is part of falco.
|
This file is part of falco.
|
||||||
|
|
||||||
falco is free software; you can redistribute it and/or modify
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
it under the terms of the GNU General Public License version 2 as
|
you may not use this file except in compliance with the License.
|
||||||
published by the Free Software Foundation.
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
falco is distributed in the hope that it will be useful,
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
Unless required by applicable law or agreed to in writing, software
|
||||||
GNU General Public License for more details.
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
@@ -1,20 +1,19 @@
|
|||||||
--
|
-- Copyright (C) 2018 Draios inc.
|
||||||
-- Copyright (C) 2016 Draios inc.
|
|
||||||
--
|
--
|
||||||
-- This file is part of falco.
|
-- This file is part of falco.
|
||||||
--
|
--
|
||||||
-- falco is free software; you can redistribute it and/or modify
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
-- it under the terms of the GNU General Public License version 2 as
|
-- you may not use this file except in compliance with the License.
|
||||||
-- published by the Free Software Foundation.
|
-- You may obtain a copy of the License at
|
||||||
--
|
--
|
||||||
-- falco is distributed in the hope that it will be useful,
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||||
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
--
|
||||||
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
-- Unless required by applicable law or agreed to in writing, software
|
||||||
-- GNU General Public License for more details.
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
-- See the License for the specific language governing permissions and
|
||||||
|
-- limitations under the License.
|
||||||
--
|
--
|
||||||
-- You should have received a copy of the GNU General Public License
|
|
||||||
-- along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
|
|
||||||
local mod = {}
|
local mod = {}
|
||||||
|
|
||||||
|
@@ -1,19 +1,19 @@
|
|||||||
--
|
-- Copyright (C) 2018 Draios inc.
|
||||||
-- Copyright (C) 2016 Draios inc.
|
|
||||||
--
|
--
|
||||||
-- This file is part of falco.
|
-- This file is part of falco.
|
||||||
--
|
--
|
||||||
-- falco is free software; you can redistribute it and/or modify
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
-- it under the terms of the GNU General Public License version 2 as
|
-- you may not use this file except in compliance with the License.
|
||||||
-- published by the Free Software Foundation.
|
-- You may obtain a copy of the License at
|
||||||
--
|
--
|
||||||
-- falco is distributed in the hope that it will be useful,
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||||
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
--
|
||||||
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
-- Unless required by applicable law or agreed to in writing, software
|
||||||
-- GNU General Public License for more details.
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
-- See the License for the specific language governing permissions and
|
||||||
|
-- limitations under the License.
|
||||||
--
|
--
|
||||||
-- You should have received a copy of the GNU General Public License
|
|
||||||
-- along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
|
|
||||||
local parser = require "parser"
|
local parser = require "parser"
|
||||||
|
|
||||||
|
@@ -1,3 +1,22 @@
|
|||||||
|
/*
|
||||||
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
|
This file is part of falco.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
#include <sys/time.h>
|
#include <sys/time.h>
|
||||||
#include <signal.h>
|
#include <signal.h>
|
||||||
|
|
||||||
|
@@ -1,3 +1,22 @@
|
|||||||
|
/*
|
||||||
|
Copyright (C) 2018 Draios inc.
|
||||||
|
|
||||||
|
This file is part of falco.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
#pragma once
|
#pragma once
|
||||||
|
|
||||||
#include <fstream>
|
#include <fstream>
|
||||||
|
Reference in New Issue
Block a user