github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-28 23:57:29 +00:00
Code Issues Projects Releases Wiki Activity
2,722 Commits 121 Branches 172 Tags 104 MiB
2ee95122df
Commit Graph

2722 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henri DF
1baedc156f Add install-digwatch script template 2016-04-21 16:33:17 -07:00
Henri DF
d59e66da86 Merge pull request #28 from draios/json-output 
Add support for json-formatted output
 2016-04-21 16:31:53 -07:00
Henri DF
45f8096dd3 Add support for json-formatted output 2016-04-21 16:30:51 -07:00
Henri DF
f837dfc78c Change s3 URL https->http for Jenkins 2016-04-21 23:17:00 +00:00
Henri DF
fc5b51774a Update README.md 2016-04-12 21:57:10 -07:00
Henri DF
8ad7679f7f Remove priority_level from yaml file 
It is not currently used for anything, will revert when that time comes.
 2016-04-12 21:49:54 -07:00
Henri DF
f2e9504bb1 Merge pull request #27 from draios/package-tweaks 
Packaging and configuration
 2016-04-12 21:37:12 -07:00
Henri DF
b14ae8ac11 Add digwatch.yaml to packages 2016-04-12 21:35:39 -07:00
Henri DF
6e008a2ff5 Improve error message when rules file not found 2016-04-13 03:43:31 +00:00
Henri DF
a529b11e0d Clean up usage message and choice of flags 2016-04-13 03:43:31 +00:00
Henri DF
86e2e17c33 Change rules file command-line setting 
Now is optional, and uses -u rather than passed as a positional arg.
 2016-04-13 03:43:31 +00:00
Henri DF
ef93844234 Rename digwatch.conf -> digwatch_rules.conf 2016-04-13 03:43:30 +00:00
Henri DF
357276b787 Fix opt def for scap input file 
(was 'R', should be 'r')
 2016-04-12 18:36:24 -07:00
Henri DF
b4bc2d52be rename infile -> scap_filename 2016-04-12 18:34:49 -07:00
Henri DF
d0e489b5c2 Remove unneccessary HAS_FILTERING conditional 2016-04-12 18:29:48 -07:00
Henri DF
859047c5f2 Merge pull request #26 from draios/file-output 
File output
 2016-04-12 18:20:31 -07:00
Henri DF
89b1a55d9e Add file output 2016-04-13 01:19:27 +00:00
Henri DF
b2698f9d20 Set up outputs listed in configuration object 2016-04-13 01:19:21 +00:00
Henri DF
179e5519ce Small refactoring of output config 
This is a step towards being able to support multiple outputs of
different types (including file outputs which require their own config).
 2016-04-12 23:21:14 +00:00
Henri DF
4eef8c9647 Merge pull request #25 from draios/configuration 
Configuration
 2016-04-12 16:15:30 -07:00
Henri DF
42de0507fa search for yaml config file 
In order:
1) cmdline opt
2) in-tree path
3) /etc/digwatch.yaml
 2016-04-12 23:14:44 +00:00
Henri DF
73ec593931 Add a configuration::init() that just sets up defaults 
(For when no config file is being used)
 2016-04-12 23:13:18 +00:00
Henri DF
dc099bfb91 Add configuration object and Yaml parser 
These aren't wired up yet.
 2016-04-12 23:13:15 +00:00
Henri DF
af4089dac3 Build and link yaml-cpp lib 2016-04-12 23:13:12 +00:00
Henri DF
997fec2d4b Merge pull request #24 from draios/read-files 
Add support for reading .scap files
 2016-04-08 16:53:04 -07:00
Henri DF
b4859015ea Add support for reading .scap files 2016-04-08 16:51:16 -07:00
Henri DF
28b21eb5b3 Merge pull request #23 from draios/config 
Command-line options simplification
 2016-04-07 16:28:07 -07:00
Henri DF
709568b578 Command-line options simplification 
Remove -N and always turn resolution off. Given the possible performance
impact, there shouldn't even be a way to have it on.
 2016-04-07 15:12:15 -07:00
Henri DF
a96816cc5d Add some simple example rules 2016-04-06 23:13:15 +00:00
Henri DF
5c4dc93e97 Merge pull request #22 from draios/no-env-var 
No env var
 2016-04-06 16:07:52 -07:00
Henri DF
dcbae750c8 Remove the need for DIGWATCH_LUA_DIR env var 2016-04-06 23:05:41 +00:00
Henri DF
c7d0c7dbd9 Remove unneeded -m <lua_main_filename> param 2016-04-06 23:05:41 +00:00
Henri DF
b4f69bf6f6 Merge pull request #21 from draios/syslog 
Remove dep on nixio by adding simple syslog lua function
 2016-04-06 11:45:38 -07:00
Henri DF
f7ba825023 Remove dep on nixio by adding simple syslog lua function 2016-04-06 11:44:00 -07:00
Henri DF
cddc56d179 Merge pull request #20 from draios/packaging 
Packaging
 2016-04-04 21:58:39 -07:00
Henri DF
77440750e6 Load probe 2016-04-04 18:39:42 -07:00
Henri DF
d96336ccaa Packaging: remove driver and add dep on sysdig package 2016-04-04 18:01:05 -07:00
Henri DF
86e1eeffb2 Statically link in lpeg lua library 2016-04-04 15:07:16 -07:00
Henri DF
8b748d5bcd readme change 2016-03-31 21:19:55 -07:00
Henri DF
39b1f64510 Packaging: Bundle lua files 2016-03-31 21:18:23 -07:00
Henri DF
aa337f169c Change package name: draios-digwatch-> digwatch 2016-03-31 21:11:07 -07:00
Henri DF
171d58c805 Packaging 
- add debian pre/post scripts
- make tgz and rpm (as well as deb)
 2016-03-31 20:48:24 -07:00
Henri DF
0cfb89ffb4 Add digwatch.conf to package, install to /etc 2016-03-31 20:47:00 -07:00
Henri DF
8546e970f0 rename rules file 2016-03-31 20:29:41 -07:00
Henri DF
e8eb1d8ddb Update README.md 2016-03-31 19:11:24 -07:00
Henri DF
37d0f7d3e0 Build .deb, .rpm, and .tgz 2016-03-31 18:54:52 -07:00
Henri DF
8ae908fe85 Rework cmake files 
Rather than do include_directory() on the whole sysdig repo, just do it
for driver, libscap, and libsinp.

This is a step on the way to building a digwatch package.
 2016-03-31 18:39:49 -07:00
Henri DF
9c459f6692 Merge pull request #19 from draios/rework-outputs 
Rework outputs
 2016-03-30 15:54:28 -07:00
Henri DF
c9806407e8 Priority level internal handling 
Handle internally as ints, then translate as appropriate in outputs
 2016-03-30 14:38:18 -07:00
Henri DF
d6dee28bbe Output simplification 
The Output is now chosen globally (for all rules), on the command line.
 2016-03-30 14:27:19 -07:00