diff --git a/CHANGELOG.md b/CHANGELOG.md index 403232bf..78fe640c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,32 @@ This file documents all notable changes to Falco. The release numbering uses [semantic versioning](http://semver.org). +## v0.20.0 + +Released on 2020-02-24 + +### Major Changes + +* fix: memory leak introduced in 0.18.0 happening while using json events and the kubernetes audit endpoint [[#1041](https://github.com/falcosecurity/falco/pull/1041)] +* new: grpc version api [[#872](https://github.com/falcosecurity/falco/pull/872)] + + +### Bug Fixes + +* fix: the base64 output format (-b) now works with both json and normal output. [[#1033](https://github.com/falcosecurity/falco/pull/1033)] +* fix: version follows semver 2 bnf [[#872](https://github.com/falcosecurity/falco/pull/872)] + +### Rule Changes + +* rule(write below etc): add "dsc_host" as a ms oms program [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(write below etc): let mcafee write to /etc/cma.d [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(write below etc): let avinetworks supervisor write some ssh cfg [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(write below etc): alow writes to /etc/pki from openshift secrets dir [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(write below root): let runc write to /exec.fifo [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(change thread namespace): let cilium-cni change namespaces [[#1028](https://github.com/falcosecurity/falco/pull/1028)] +* rule(run shell untrusted): let puma reactor spawn shells [[#1028](https://github.com/falcosecurity/falco/pull/1028)] + + ## v0.19.0 Released on 2020-01-23 diff --git a/README.md b/README.md index a610c52e..48f9b6b0 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ #### Latest release -**v0.19.0** +**v0.20.0** Read the [change log](CHANGELOG.md) [![Build Status](https://img.shields.io/circleci/build/github/falcosecurity/falco/master?style=for-the-badge)](https://circleci.com/gh/falcosecurity/falco) [![CII Best Practices Summary](https://img.shields.io/cii/summary/2317?label=CCI%20Best%20Practices&style=for-the-badge)](https://bestpractices.coreinfrastructure.org/projects/2317) [![GitHub](https://img.shields.io/github/license/falcosecurity/falco?style=for-the-badge)](COPYING) diff --git a/docker/kernel/linuxkit/Dockerfile b/docker/kernel/linuxkit/Dockerfile index 8eef6b53..78a567f1 100644 --- a/docker/kernel/linuxkit/Dockerfile +++ b/docker/kernel/linuxkit/Dockerfile @@ -1,13 +1,13 @@ ARG ALPINE_VERSION=3.10 ARG KERNEL_VERSION=4.9.184 -ARG FALCO_VERSION=0.19.0 +ARG FALCO_VERSION=0.20.0 FROM linuxkit/kernel:${KERNEL_VERSION} AS ksrc FROM falcosecurity/falco:${FALCO_VERSION}-minimal as falco FROM alpine:${ALPINE_VERSION} AS probe-build LABEL maintainer="opensource@sysdig.com" ARG KERNEL_VERSION=4.9.184 -ARG FALCO_VERSION=0.19.0 +ARG FALCO_VERSION=0.20.0 ENV FALCO_VERSION=${FALCO_VERSION} ENV KERNEL_VERSION=${KERNEL_VERSION} @@ -32,7 +32,7 @@ RUN apk add --no-cache --update \ autoconf FROM alpine:${ALPINE_VERSION} -ARG FALCO_VERSION=0.19.0 +ARG FALCO_VERSION=0.20.0 ENV FALCO_VERSION=${FALCO_VERSION} COPY --from=probe-build /usr/src/falco-${FALCO_VERSION}/falco-probe.ko / CMD ["insmod","/falco-probe.ko"] diff --git a/docker/minimal/Dockerfile b/docker/minimal/Dockerfile index b271cc01..1e4e86d3 100644 --- a/docker/minimal/Dockerfile +++ b/docker/minimal/Dockerfile @@ -2,7 +2,7 @@ FROM ubuntu:18.04 as ubuntu LABEL maintainer="opensource@sysdig.com" -ARG FALCO_VERSION=0.19.0 +ARG FALCO_VERSION=0.20.0 ENV FALCO_VERSION=${FALCO_VERSION} diff --git a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml index 14f0b186..d0d5145c 100644 --- a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml +++ b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml @@ -20,7 +20,7 @@ spec: privileged: true #env: # - name: FALCOCTL_FALCO_VERSION - # value: 0.19.0 + # value: 0.20.0 # - name: FALCOCTL_FALCO_PROBE_URL # value: # - name: FALCOCTL_FALCO_PROBE_REPO @@ -31,7 +31,7 @@ spec: readOnly: true containers: - name: falco - image: falcosecurity/falco:0.19.0-slim + image: falcosecurity/falco:0.20.0-slim securityContext: privileged: true # Uncomment the 3 lines below to enable eBPF support for Falco.