github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-29 08:07:24 +00:00
Code Issues Projects Releases Wiki Activity
3,607 Commits 121 Branches 172 Tags 104 MiB
dad382edd6
Commit Graph

3607 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Leonardo Grasso
d4623609c4 Update PULL_REQUEST_TEMPLATE.md 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-01-26 18:21:43 +01:00
Leonardo Grasso
30ea744d12 docs(.github): rules are no longer in this repo 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-01-26 18:21:43 +01:00
Leonardo Grasso
e8d9b5a7e7 build(cmake/modules): bump k8saudit to 0.5.0 and cloudtrail to 0.6.0 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
 2023-01-26 13:27:43 +01:00
Andrea Terzolo
229633ee8a update(CI): mitigate frequent failure in CircleCI jobs 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00
Andrea Terzolo
acd1e0dc28 update: split the build phase in multiple RUN commands 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 12:37:43 +01:00
Andrea Terzolo
8eb6fbf32d fix(userspace): use the right path for the cpus_for_each_syscall_buffer 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-26 11:44:44 +01:00
Andrea Terzolo
a7e991bf1c chore: bump libs version 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
059a28184d tests: fix rule paths 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
0918cd0c54 chore: bump rules and falcoctl 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
328c3e0a29 update: add falco alias to kmod unit 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
92a5d770f4 fix: create directory for systemd scripts 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
84db98376e update(cmake): bumped falcoctl to latest version. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
26c00a3948 chore: couple of small fixes. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
3c7fc1a8c5 cleanup: rename plugin unit into custom unit 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
a67657f316 docs: fix some comments 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
7ed5f39da0 scripts: remove falco.target and use require falcoctl with Wants= 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
9b7ab105d8 chore: fix cmake file copy 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
7d355dd2d9 chore(scripts): small fixes to systemd units. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
f96f2179ba fix(scripts): some small fixes around falco and falcoctl systemd services logic. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
3b2732355a update(cmake): bumped falcoctl to 0.3.0-rc2. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
0f22fde7cd update(scripts): multiple renamings to falcoctl service + fixed description. 
Moreover, now falcoctl service is enabled by default. It being bound to falco.target
allows us to avoid it running when falco.target is not running.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
2591ed4d68 new(scripts): add a falco.target that consists of falco-X.service units. 
falcoctl will then run and bind to falco.target.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
394d495040 update(cmake,scripts): updated falcoctl to 0.3.0-rc1. 
Fix up falcoctl.service.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Lorenzo Susini <susinilorenzo1@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
7bdd0bf646 chore(scripts): updated falcoctl service. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
ffce069c96 update(scripts): added a falcoctl systemd service. 
Add a new dialog to choose whether to enable falcoctl feed.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Federico Di Pierro
2a886f7a3d new(cmake): added a cmake module to enforce the download and installation of falcoctl. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-25 17:37:37 +01:00
Andrea Terzolo
77686cb8b9 update: don't expose available CPU feature 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-24 12:41:34 +01:00
Andrea Terzolo
42670a50c7 new: support multiple buffer modes and online CPUs 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
 2023-01-24 12:41:34 +01:00
Federico Di Pierro
e64c14a947 fix(userspace/falco): fixed grpc server shutdown. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-24 11:59:34 +01:00
Jason Dellaluce
f3546a9a55 update(cmake): new rules checksums 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
cf76a09425 chore(RELEASE.md): fix typo 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
97ec861c02 docs(RELEASE.md): update release guidelines 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
4aeb3672e5 fix(test): update rules file reference 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
0ad80350a4 chore(README.md): fix reference to rules in readme 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
0b324f06f3 update(cmake): add rules external project for building packages 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
0ca7fe29fa new: add falcosecurity/rules submodule 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
aafbbdb31f refactor: remove rules directory as moved to another repo 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Jason Dellaluce
32dcb9ffd0 refactor: remove rules_inventory as being moved to another repo 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-21 17:58:08 +01:00
Roberto Scolaro
45f5589b69 fix(scripts): fixed incorrect bash var expansion 
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
 2023-01-20 17:41:05 +01:00
Jason Dellaluce
099f118e34 fix(scripts): invalidate all signatures at once 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
4bc7d3fa65 fix(scripts): aws cp instead of aws sync 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
9b644d893b fix(scripts): aws sync flags 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
717dcaf473 update(scripts): regenerate repos signatures 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
95940d2e16 chore(scripts): fix typos 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
1d0c50e272 update(scripts): allow regenerating signatures without publishing new packages 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
61bc6c8d32 update(scripts): sync regenerated signatures in s3 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
9f4573a26a update(scripts): add option for updating all signatures in publish-rpm 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
ac2555ca3c update(scripts): add option for updating all signatures in publish-deb 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-20 16:56:06 +01:00
Jason Dellaluce
cfc96e899b fix(docker/falco): trust latest GPG key 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
 2023-01-19 12:33:46 +01:00
Federico Di Pierro
306f9ba468 fix(userspace/falco): fixed build. 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
 2023-01-17 16:00:23 +01:00