github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2026-03-18 18:58:41 +00:00
Code Issues Projects Releases Wiki Activity
3,835 Commits 122 Branches 184 Tags
release/0.35.x
Commit Graph

3835 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Di Pierro
aa49db45db chore(ci): only install awscli from repo. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
0.35.1 		2023-06-29 17:21:01 +02:00
Federico Di Pierro
de7a6cec54 fix(ci): fixed publish deb packages with new debian bookwork. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-29 17:21:01 +02:00
Lorenzo Susini
fec9752497 docs: update changelog for 0.35.1 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-29 12:20:00 +02:00
Lorenzo Susini
8bc0d52e92 update(userspace): change description of snaplen option 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
35401ee1bf update(cmake): bump libs to 0.11.3 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Andrea Terzolo
c3499b08ad CI: bump ubuntu version for tests-driver-loader-integration 
bump Ubuntu version on tests-driver-loader-integration job to fix a
verifier issue as a temp workaround

Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
0d3e73461d chore(userspace/falco): fix misleading content 
Co-authored-by: Federico Di Pierro <nierro92@gmail.com>
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
c47d1582b5 chore: apply codespell suggestions 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
0b10c55b30 fix(userspace/falco/app): evt sources safety check issues in live mode 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
492efe0412 update(userspace/falco/app): check illegal source setup in live inspectors 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
ebbcef6dda update(userspace/falco/app): print loaded event sources 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Melissa Kilby
8e2980a37f cleanup(config): minor config clarifications 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
8bf598313b update(cmake): bump falco rules to v1.0.1 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Federico Di Pierro
bc48c4fa3a chore(userspace): cleanup old code. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-29 12:20:00 +02:00
Federico Di Pierro
9be4144b72 fix(userspace): switch to timer_settime API in stats writer. 
It seems like `setitimer` is not correctly working when built from CI; perhaps a gcc/glibc bug?

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-29 12:20:00 +02:00
Roberto Scolaro
7f4b176a16 fix(scripts/falco-driver-loader): fixed ubuntu kernel version 
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-06-29 12:20:00 +02:00
Federico Di Pierro
9227f9f6fa fix(scripts): fix falco-driver-loader for debian. 
Support debian `rt` and `cloud` flavors.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
3f1ca6fab0 chore(userspace/falco): make source matching error more expressive 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
c84f1275fb update(ci): run GHA regression tests on static falco builds 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
13b39e38e7 update(submodules): bump falcosecurity/testing to 4544d3c1d2bc4516251fcc8766b92e7cd0d489be 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
109dcb8160 update(cmake): bump falcoctl to v0.5.1 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
b09d1adcf8 wip: include regression tests in master's CI 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Jason Dellaluce
a9f803ad46 update(submodules): add falcosecurity/testing submodule 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-06-29 12:20:00 +02:00
Luca Guerra
faa915df89 update(libs): update libs to 0.11.2 
Signed-off-by: Luca Guerra <luca@guerra.sh>
0.35.0 		2023-06-07 14:13:42 +02:00
Luca Guerra
495ab00afe fix(ci): use /tmp/falco-build-* as a temp directory 
Signed-off-by: Luca Guerra <luca@guerra.sh>
 2023-06-07 14:13:42 +02:00
Federico Di Pierro
914286daaa new(docs): update Changelog for 0.35.0. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-07 11:16:42 +02:00
Lorenzo Susini
cb9482d90f update(cmake): bump Falco rules to 1.0.0 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-07 11:16:42 +02:00
Leonardo Grasso
63dba83b6a docs(README.md): add scope/status badge and simply doc structure 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-06-06 17:16:39 +02:00
Lorenzo Susini
2c3cb94646 update(cmake): bump libs to 0.11.1 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-06 17:16:39 +02:00
Lorenzo Susini
448b97224d update(cmake): bump plugin versions 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
0.35.0-rc1 		2023-06-05 14:51:37 +02:00
Lorenzo Susini
6f1b548c6b update(cmake): bump falco rules to 1.0.0-rc1 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-05 12:02:32 +02:00
Lorenzo Susini
2865260c92 update(cmake): bump libs to 0.11.0 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-06-05 11:38:31 +02:00
Daniel Wright
9097d2c359 fix: unquote quoted URL's to avoid libcurl errors 
This commit will unquote URL's allowing them to be supported by
libcurl and eliminate any errors when a valid (quoted) URL is supplied
by a user.

Closes #2579

Signed-off-by: Daniel Wright danielwright@bitgo.com
 2023-06-05 11:09:32 +02:00
Melissa Kilby
e89f08ff3f cleanup(docs): adjust release.md 
Co-authored-by: Federico Di Pierro <nierro92@gmail.com>
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-06-02 19:44:22 +02:00
Melissa Kilby
4f3a60f193 cleanup(docs): adjust release.md 
Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-06-02 19:44:22 +02:00
Melissa Kilby
f682a1dbb8 chore(config): adjust maturity level for modern_bpf.cpus_for_each_syscall_buffer 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-06-02 19:44:22 +02:00
Melissa Kilby
3a0cdd3cb7 cleanup(docs): update release.md w/ relevant info for modern_bpf driver 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-06-02 19:44:22 +02:00
Federico Di Pierro
03128368cf update(cmake): bumped libs to 0.11.0-rc5 and driver to 5.0.1. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-06-01 12:39:16 +02:00
dependabot[bot]
620c83d6a4 build(deps): Bump submodules/falcosecurity-rules 
Bumps [submodules/falcosecurity-rules](https://github.com/falcosecurity/rules) from `3471984` to `16fb709`.
- [Release notes](https://github.com/falcosecurity/rules/releases)
- [Commits](3471984e0c...16fb709527)

---
updated-dependencies:
- dependency-name: submodules/falcosecurity-rules
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-01 10:02:16 +02:00
Lorenzo Susini
9fda7dfb93 fix(userspace/engine): store alternatives as array in -L json output 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-05-31 16:16:31 +02:00
Melissa Kilby
017075c346 cleanup(docs): mention roadmap in readme 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 16:03:31 +02:00
Melissa Kilby
4338a8adec cleanup(docs): adjust readme 
Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 16:03:31 +02:00
Melissa Kilby
18345b1a1a cleanup(docs): adjust falco readme style and content 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 16:03:31 +02:00
Melissa Kilby
1e6d01621f fix formatting 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 15:48:32 +02:00
Melissa Kilby
aa8c13b4e4 cleanup(userspace): adjust stats n_drops_perc 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 15:48:32 +02:00
Melissa Kilby
efd0c7421e cleanup(userspace,config): apply reviewers suggestions 
Co-authored-by: Jason Dellaluce <jasondellaluce@gmail.com>
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 15:48:32 +02:00
Melissa Kilby
b29f6f4b2f cleanup(config): add send_numeric_zero_values option to metrics 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 15:48:32 +02:00
Melissa Kilby
e775fc6f5b cleanup(userspace): improve metrics UX 
add send_numeric_zero_values config to allow users to save space
when using metrics option, while still also allowing
to send all keys (especially because we don't document the schema)

Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
 2023-05-31 15:48:32 +02:00
Daniel Wright
2e7a0b026f feat: add jq and curl to falco-no-driver docker image 
To supoprt the use of outputs that are documented in the falco
examples (e.g. jq piped to curl) I would like to propose including
these tools in the falco-no-driver image. They add a very minimal
size and dependency to the image but would make things a lot easier
for users getting started.

Closes #2580

Signed-off-by: Daniel Wright <danielwright@bitgo.com>
 2023-05-31 13:21:31 +02:00
Leonardo Grasso
25d23168f4 docs(proposals): roadamap mgt non-goals 
Co-authored-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
Co-authored-by: Massimiliano Giovagnoli <me@maxgio.it>
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-05-30 15:51:30 +02:00