Commit Graph

  • a8377d544a update(cmake): updated libs to latest 0.10.1 tag. Federico Di Pierro 2023-01-17 10:53:36 +01:00
  • 41a5de670a docs(falco.yaml): update webserver config docs Jason Dellaluce 2023-01-16 11:20:35 +00:00
  • 55a6436ee8 new(userspace/falco): add webserver endpoint for retrieving internal versions Jason Dellaluce 2023-01-13 18:08:17 +00:00
  • ea48ec70be refactor(userspace/falco): use new utility for printing versions and support Jason Dellaluce 2023-01-13 16:10:47 +00:00
  • 7724ad940a new(userspace/falco): standaline utility for retrieving internal version numbers Jason Dellaluce 2023-01-13 16:10:01 +00:00
  • bb9edea666 install ca-certificates in falco:no-driver image Thomas Labarussias 2023-01-13 14:45:25 +01:00
  • c69b198777 chore(userspace/falco): cleanup error message when no output is configured Jason Dellaluce 2023-01-13 14:01:15 +00:00
  • db2f5d5e9c fix(userspace/falco): solve tests issues Jason Dellaluce 2023-01-12 17:38:51 +00:00
  • 4aefb7fd7d fix(userspace/falco): require config file only when needed Jason Dellaluce 2023-01-12 13:15:06 +00:00
  • 149c95c3fb fix(userspace/falco): load config before every other action Jason Dellaluce 2023-01-12 12:19:45 +00:00
  • 46f15facfe fix(userspace/falco): adapt tests Jason Dellaluce 2023-01-12 12:02:00 +00:00
  • 78312c8c15 update(userspace/falco): clean up configuration and allow re-initialization Jason Dellaluce 2023-01-12 11:21:00 +00:00
  • d6bbf5d442 refactor(userspace/falco): isolate yaml helpers (2) Jason Dellaluce 2023-01-12 08:52:57 +00:00
  • 2eac8f88cb refactor(userspace/falco): isolate yaml helpers (1) Jason Dellaluce 2023-01-12 08:52:30 +00:00
  • bc3ec30f3e chore(userspace/falco) remove unused var Jason Dellaluce 2023-01-12 08:48:53 +00:00
  • 42ef8db26f refactor(userspace/falco): deprecate version-json option and rely on json_output Jason Dellaluce 2023-01-12 08:48:10 +00:00
  • 09d9ae135b update(userspace/falco): load default config at app initialization Jason Dellaluce 2023-01-12 08:45:55 +00:00
  • 57cafcb65a refator(userspace/falco): allow loading default config with no file Jason Dellaluce 2023-01-12 08:42:41 +00:00
  • c1985a7c99 fix(userspace/engine): absolute rule condition position in validation context Jason Dellaluce 2023-01-09 17:31:41 +00:00
  • d79d7112a0 fix(userspace/engine): catch YAML parsing and validation errors with right context Jason Dellaluce 2023-01-09 17:30:49 +00:00
  • 1b2c7ef7d9 new(falco): add --version-json to print version information in json format Luca Guerra 2022-12-16 16:24:48 +00:00
  • 280fcfe5d3 update: deprecate Mesos support, --mesos-api, and -pm command-line flags Leonardo Grasso 2022-12-16 11:58:19 +01:00
  • 8381d58f2c chore(scripts/falco-driver-loader): improve curl resiliency Furkan 2022-12-22 09:39:48 +03:00
  • 19d5430f5d update: modern falco builder Andrea Terzolo 2022-12-22 17:13:40 +01:00
  • 25b135c16e build(rules): cleanup rules from cmake chore/move-rules-to-their-repo Leonardo Grasso 2022-12-21 15:57:30 +01:00
  • e840911d6a chore: remove rules from Falco repo Leonardo Grasso 2022-12-21 15:53:40 +01:00
  • 609171fe14 doc: reword Andrea Terzolo 2022-12-16 13:13:36 +01:00
  • de6292ce09 doc(userspace): fix a warning message Andrea Terzolo 2022-12-16 12:55:46 +01:00
  • decabbc519 update(ci): bump also musl job Andrea Terzolo 2022-12-16 13:24:40 +01:00
  • 647c085041 ci: bump resource class Andrea Terzolo 2022-12-16 12:18:13 +01:00
  • e1ff4db67a update(ci): support modern bpf with musl build Andrea Terzolo 2022-12-13 22:45:50 +01:00
  • c861f0b02a update(ci): update ci jobs to generate Falco images with modern probe Andrea Terzolo 2022-12-13 15:51:43 +01:00
  • e5ed3284db chore: bump libs/driver version Andrea Terzolo 2022-12-13 15:51:31 +01:00
  • 9d2f1e0729 new(scripts): add bottlerocket support in falco-driver-loader. Federico Di Pierro 2022-12-13 11:39:09 +01:00
  • 100e92a6fb fix: job step name Andrea Terzolo 2022-12-16 18:56:43 +01:00
  • 9b41b77d53 cleanup(ci): move static analysis from circle CI to GHA Andrea Terzolo 2022-12-16 18:44:23 +01:00
  • b17d513251 rules: use list of Falco containers instead of repeating them Oscar Utbult 2022-11-14 16:45:05 +01:00
  • 6ea233dd75 new(falco): add engine version to --version Luca Guerra 2022-12-15 16:38:16 +00:00
  • dde2fdd67c new(falco): add driver_api_version, driver_schema_version, default_driver_version, libs_version to support Luca Guerra 2022-12-15 16:37:53 +00:00
  • a4ff604021 update(falco): update cpp-httplib to 0.11.3 Luca Guerra 2022-12-16 09:57:25 +00:00
  • d9a9fdf577 Rule: detecting executions from /dev/shm Alberto Pellitteri 2022-09-27 15:39:11 +02:00
  • 68b87a6f13 Rule: detecting executions looking for AWS credentials Alberto Pellitteri 2022-09-27 14:36:27 +02:00
  • e5f3b724a5 update(docs): reference Falco default rules overview markdown document Melissa Kilby 2022-11-17 10:58:11 -08:00
  • f04ff10bd7 new(rules): init rules_inventory/ Melissa Kilby 2022-11-17 10:56:26 -08:00
  • 6afe9d9200 update(rules): ehanced rules tagging for inventory / threat modeling Melissa Kilby 2022-11-17 10:55:41 -08:00
  • cec135b4b6 fix(ci): fix rpm sign job dependencies cappellinsamuele 2022-12-15 15:42:57 +01:00
  • 73b9273472 chore(scripts): rename env var Leonardo Grasso 2022-12-15 15:35:04 +01:00
  • 7e52db2b42 update(script): makes user able to pass additional custom option to driver-loader curl command Andrea Bonanno 2022-02-15 17:54:15 +01:00
  • a1d68e848f chore(scripts): avoid failing if mkdir/cp/depmod fail. Federico Di Pierro 2022-12-06 14:00:11 +01:00
  • d0ac5981a7 update(scripts): typo Federico Di Pierro 2022-12-05 16:33:06 +01:00
  • 380dd23a60 update(scripts): typo Federico Di Pierro 2022-12-05 16:32:57 +01:00
  • 4c550bbe06 chore(scripts): manage dialog cancel button, and increase dialog vertical size to comprehend all of 5 options. Federico Di Pierro 2022-11-17 09:53:00 +01:00
  • 76c8a645f1 chore(scripts): properly configure falco-kmod dependency on falco-kmod-inject with PartOf. Federico Di Pierro 2022-11-14 14:32:55 +01:00
  • 5bb566d613 fix: stop also falco-kmod-inject.service unit Andrea Terzolo 2022-11-11 14:15:48 +00:00
  • ee08c4d3de update: remove falco target Andrea Terzolo 2022-11-11 12:54:08 +00:00
  • 988256d930 fix(scripts): fixed rpm dialog script. Federico Di Pierro 2022-11-10 16:52:06 +01:00
  • a94f26ec43 chore(scripts): fallback at previous insmod method, if modprobe fails. Federico Di Pierro 2022-11-10 16:19:12 +01:00
  • d4d2777876 fix(scripts): fixed PartOf in bpf and modern-bpf systemd units. Federico Di Pierro 2022-11-10 14:58:16 +01:00
  • 4fc10bc774 chore(scripts,cmake): rename modern_bpf to modern-bpf in deb and rpm scripts. Federico Di Pierro 2022-11-10 14:45:16 +01:00
  • 87416ab67c chore(scripts): try to install kmod system wide. Federico Di Pierro 2022-11-10 09:13:21 +01:00
  • 01f4af480d fix(scripts): fixed some debian issues by directly using systemctl tool. Federico Di Pierro 2022-11-09 15:02:22 +01:00
  • cb20cf83ff new(scripts, cmake): added support for modern bpf probe. Federico Di Pierro 2022-11-09 14:37:22 +01:00
  • c6f668bc71 cleanup(scripts, cmake): fix switch in deb and rpm postinst scripts. Federico Di Pierro 2022-11-07 10:10:38 +01:00
  • 1570e9f235 chore(scripts, cmake): add falco-plugin.service to install files. Federico Di Pierro 2022-10-25 16:02:10 +02:00
  • cbea78b283 fix(scripts): by default, do not enable any driver. Federico Di Pierro 2022-10-25 11:04:37 +02:00
  • ca55e70a33 chore: make dontstart default dialog selection. Federico Di Pierro 2022-10-25 10:22:51 +02:00
  • 4596c919a6 fix(scripts): improve gcc skip logic. Federico Di Pierro 2022-10-25 09:42:20 +02:00
  • 4e57670599 chore(scripts): add back a dontstart option. Federico Di Pierro 2022-10-24 17:32:09 +02:00
  • 91fe2e9e24 chore(scripts): added support for falco@plugin.target. Federico Di Pierro 2022-10-24 17:24:56 +02:00
  • b04bb2e32e chore(scripts): renamed Don't Start to Plugin. Federico Di Pierro 2022-10-24 15:46:56 +02:00
  • e26aa6a385 chore(scripts): when running in non-interactive mode, do not enable neither start any driver. Federico Di Pierro 2022-10-14 09:05:38 +02:00
  • 818f717622 chore(scripts,cmake): dialog is an optional dep, do not list it among deps. Federico Di Pierro 2022-10-13 08:45:22 +02:00
  • 9232383616 chore(cmake): dkms is actually needed by falco driver loader. Federico Di Pierro 2022-10-12 17:28:47 +02:00
  • 41ffc90633 cleanup(scripts): allow falco-driver-loader script to manage more gcc versions. Federico Di Pierro 2022-10-12 17:20:01 +02:00
  • b6078ce1be new(scripts): allow rpm/deb users to decide at configure time which driver to use (kmod or ebpf). Federico Di Pierro 2022-10-12 15:43:38 +02:00
  • 06fe9e6985 new(scrips): improve systemd units for rpm and debian. Federico Di Pierro 2022-10-10 14:54:42 +02:00
  • f43e6c445a rules: add OpenSSH private key to macro private_key_or_password Oscar Utbult 2022-11-09 15:18:46 +01:00
  • 1f15af1e4f feat: Support for detecting outbound connection to c2 servers with FQDN domains and IP addresses. Nicolas-Peiffer 2022-10-10 16:41:16 +02:00
  • 39753b6130 update(ci): remove 2 usages of falco-builder Andrea Terzolo 2022-12-13 18:01:46 +01:00
  • b758206cf1 cleanup(ci): remove some no more useful jobs Andrea Terzolo 2022-12-13 17:14:17 +01:00
  • 9c04622bd6 chore(proposals): fix typo found by FedeDP Leonardo Grasso 2022-12-12 09:39:30 +01:00
  • 0200ec288e chore(proposals): fix typo found by codespell Leonardo Grasso 2022-12-05 10:56:39 +01:00
  • 50c169987e docs(proposal): new artifacts distribution proposal Leonardo Grasso 2022-11-28 10:49:30 +01:00
  • 9763809cd9 update(ci): enable gh actions jobs on 'maintainers/*' branches enable_maintainers_gh_jobs Andrea Terzolo 2022-12-13 16:29:00 +01:00
  • 5552bcab76 chore: fix typo Jason Dellaluce 2022-12-06 14:21:52 +00:00
  • cb58ea9c57 test: add regression tests for ref loops in lists and macros Jason Dellaluce 2022-12-06 13:56:48 +00:00
  • 0a6db28783 fix(test/engine): solve compilation issues with macro resolver Jason Dellaluce 2022-12-06 13:56:24 +00:00
  • 25ddc3c6a2 update(userspace/engine): broader err catching support in macro resolver Jason Dellaluce 2022-12-06 13:56:01 +00:00
  • 35dd0fc153 fix(userspace/engine): implement loop detection in macro resolver Jason Dellaluce 2022-12-06 12:43:26 +00:00
  • 0c39776557 chore(ci): properly checkout pull request HEAD instead of merge commit in gh actions. Federico Di Pierro 2022-12-05 15:59:30 +01:00
  • 4696948754 fix(cmake): properly fetch dev version by appending latest Falco tag, delta between master and tag, and hash. Federico Di Pierro 2022-11-15 15:59:38 +01:00
  • ec04b758e6 chore(deps): Bump certifi from 2020.4.5.1 to 2022.12.7 in /test dependabot[bot] 2022-12-08 10:00:47 +00:00
  • 52ee61b800 chore(userspace): add njson lib as a dependency for falco_engine Andrea Terzolo 2022-12-09 17:54:03 +01:00
  • 70dfdb2e75 support older rhel distros in falco-driver-loader gentooise 2022-12-06 17:17:42 +01:00
  • 1b227cf90b update(cmake): bumped libs and driver to latest RC. Federico Di Pierro 2022-12-06 10:31:43 +01:00
  • ff3a38415d fix: remove conflicting helper methods Andrea Terzolo 2022-12-05 17:45:14 +00:00
  • 94ed56df95 chore: bump libs Andrea Terzolo 2022-12-05 16:42:55 +01:00
  • 6a972272c0 update: the capture will be stopped in the inspector destructor Andrea Terzolo 2022-12-05 14:45:21 +01:00
  • 55deb452d8 update: start/stop capture inside do_inspect Andrea Terzolo 2022-11-29 10:59:01 +01:00
  • 87371492c5 update(userspace/engine): updated checksum. Federico Di Pierro 2022-11-25 16:17:08 +01:00