Commit Graph

  • 17dfe4f55d fix(userspace/falco): properly start/stop capture. Federico Di Pierro 2022-11-24 14:30:15 +01:00
  • 928ad6625b update(cmake): update libs to 8eef2e445364d892dba12564d20f9651232eba7c Federico Di Pierro 2022-11-24 14:25:02 +01:00
  • 9efbd16476 new(docker): introduce a new development docker image dev_docker Andrea Terzolo 2022-10-17 21:19:33 +00:00
  • 43e4d25848 chore(ci): properly checkout pull request HEAD instead of merge commit in gh actions. fix/dev_version Federico Di Pierro 2022-12-05 15:59:30 +01:00
  • 67d592e83a fix(cmake): properly fetch dev version by appending latest Falco tag, delta between master and tag, and hash. Federico Di Pierro 2022-11-15 15:59:38 +01:00
  • 356a4a0749 Also copy ruleset when copying falco source Mark Stemm 2022-10-24 13:19:20 -07:00
  • 910b8ff858 Fix(engine) Save parse positions when finding unresolved macros Mark Stemm 2022-08-24 17:16:01 -07:00
  • 83b12bab1d Fix(engine): include parse positions in compile errors Mark Stemm 2022-08-24 17:11:27 -07:00
  • ecc1853d60 update(rule): improve insmod detection within container using CAP_SYS_MODULE Lorenzo Susini 2022-11-29 14:33:51 +00:00
  • fbd6628693 new(config): add the simulate_drops config explicitly Andrea Terzolo 2022-10-16 17:19:12 +00:00
  • ba61706557 update(userspace/falco): enable using zlib with webserver Jason Dellaluce 2022-07-12 09:42:35 +00:00
  • 234026e14b rule(macro rpm_procs): let salt-call write to rpm database vin01 2022-11-14 22:16:24 +01:00
  • d03826379b rule(Read sensitive file untrusted): let salt-call read sensitive files vin01 2022-11-14 21:53:09 +01:00
  • 3697d1fae2 Fixed typo Alessandro Brucato 2022-10-18 13:12:28 +02:00
  • e76c31b493 Added PTRACE_SEIZE, PTRACE_POKETEXT, PTRACE_POKEDATA, PTRACE_SETREGS and whitelist macro Alessandro Brucato 2022-10-18 12:05:55 +02:00
  • d95e36b526 Rule: PTRACE attached to process Alessandro Brucato 2022-09-28 17:18:12 +02:00
  • a71907c1b7 executable hashing integration in falco.yaml. exec-hashes Loris Degioanni 2022-11-29 17:06:25 -08:00
  • 15b57bd972 fix: remove minor string view dependencies Jason Dellaluce 2022-11-28 17:18:33 +00:00
  • 68f4d5bb59 fix(userspace/engine): no need to use external deps Leonardo Grasso 2022-11-28 17:02:02 +01:00
  • 138e373ace chore(cmake/modlule): cleanup DownloadStringViewLite Leonardo Grasso 2022-11-28 16:59:07 +01:00
  • 47fd90bb7f chore: remove not used dependency - string-view-lite Leonardo Grasso 2022-11-28 16:58:20 +01:00
  • 76726d7def chore: bump libs version falco_modern_probe Andrea Terzolo 2022-11-29 11:40:11 +01:00
  • 3a56804cff new(CHANGELOG): add entry for 0.33.1 Luca Guerra 2022-11-23 15:23:23 +00:00
  • 8f188ebe06 update(docs): polish release.md based on community feedback Melissa Kilby 2022-09-16 11:15:30 -07:00
  • 7ead21daac update(docs): polish overview and versioning sections of release.md Melissa Kilby 2022-09-15 15:25:00 -07:00
  • d3badeb77e update(docs): add overview and versioning to release.md Melissa Kilby 2022-09-14 01:09:50 -07:00
  • a448b88ce3 new(CHANGELOG): add entry for 0.33.1 0.33.1 release/0.33.1 Luca Guerra 2022-11-23 15:23:23 +00:00
  • e507eeebae update(cli): also add cg / kg container-gvisor / kubernetes-gvisor Luca Guerra 2022-11-22 14:59:20 +00:00
  • 7751179d9d update(falco): add container-gvisor and kubernetes-gvisor print options Luca Guerra 2022-11-11 16:55:08 +00:00
  • bab251ac3f fix(engine): fix warning about redundant std::move Luca Guerra 2022-11-11 11:00:31 +00:00
  • eaf175f6b9 fix(output): do not print syscall_buffer_size when gvisor is enabled Aldo Lacuku 2022-11-09 09:46:48 +01:00
  • d0e8af6aab update(build): bump libs to 0.9.2 Luca Guerra 2022-11-23 14:40:50 +00:00
  • 588ab01bfd Add Xenit AB to adopters Edvin Norling 2022-11-10 13:23:22 +01:00
  • f08a5b4067 update(cli): also add cg / kg container-gvisor / kubernetes-gvisor Luca Guerra 2022-11-22 14:59:20 +00:00
  • dea02f82e8 update(falco): add container-gvisor and kubernetes-gvisor print options Luca Guerra 2022-11-11 16:55:08 +00:00
  • da5f0a8d4f update: add HOST_ROOT env in dockerfile Andrea Terzolo 2022-11-15 16:09:39 +01:00
  • 5d1b0c5717 chore: bump libs version Andrea Terzolo 2022-11-11 17:04:43 +00:00
  • d8d6c0ec30 new(scrips): improve systemd units for rpm and debian. Federico Di Pierro 2022-10-10 14:54:42 +02:00
  • e3dbae3259 fix(engine): fix warning about redundant std::move Luca Guerra 2022-11-11 11:00:31 +00:00
  • d0ceba83b4 update(cmake, docker, circleci): updated libs and driver to latest master. Federico Di Pierro 2022-10-31 15:54:35 +01:00
  • a87d05b239 temp test_modern_probe Andrea Terzolo 2022-11-11 11:49:45 +00:00
  • 2ab76405bb fix(scripts): fixed PartOf in bpf and modern-bpf systemd units. Federico Di Pierro 2022-11-10 14:58:16 +01:00
  • 7598a1f939 chore(scripts,cmake): rename modern_bpf to modern-bpf in deb and rpm scripts. Federico Di Pierro 2022-11-10 14:45:16 +01:00
  • 5555584230 wip Federico Di Pierro 2022-11-10 14:38:49 +01:00
  • 3553087f0d chore(scripts): try to install kmod system wide. Federico Di Pierro 2022-11-10 09:13:21 +01:00
  • 4bca6f7761 fix(scripts): fixed some debian issues by directly using systemctl tool. Federico Di Pierro 2022-11-09 15:02:22 +01:00
  • 161246fe1a fix(output): do not print syscall_buffer_size when gvisor is enabled Aldo Lacuku 2022-11-09 09:46:48 +01:00
  • bba5086078 new(scripts, cmake): added support for modern bpf probe. Federico Di Pierro 2022-11-09 14:37:22 +01:00
  • 0202996587 chore: bump libs Andrea Terzolo 2022-11-07 22:04:42 +01:00
  • b4e5adc585 fix(CI): updating the source and build paths Andrea Terzolo 2022-11-07 14:58:57 +01:00
  • 240c0b870d fix(userspace/falco): verify engine fields only for syscalls Jason Dellaluce 2022-11-07 11:05:09 +00:00
  • db0dee51cf cleanup(scripts, cmake): fix switch in deb and rpm postinst scripts. Federico Di Pierro 2022-11-07 10:10:38 +01:00
  • 9e8fa5b356 chore(scripts, cmake): add falco-plugin.service to install files. Federico Di Pierro 2022-10-25 16:02:10 +02:00
  • 3b9eff9a42 fix(scripts): by default, do not enable any driver. Federico Di Pierro 2022-10-25 11:04:37 +02:00
  • f09d861d52 chore: make dontstart default dialog selection. Federico Di Pierro 2022-10-25 10:22:51 +02:00
  • 2311010dd7 fix(scripts): improve gcc skip logic. Federico Di Pierro 2022-10-25 09:42:20 +02:00
  • a1defd3476 chore(scripts): add back a dontstart option. Federico Di Pierro 2022-10-24 17:32:09 +02:00
  • 173f4129c9 chore(scripts): added support for falco@plugin.target. Federico Di Pierro 2022-10-24 17:24:56 +02:00
  • 6829fe8f5f chore(scripts): renamed Don't Start to Plugin. Federico Di Pierro 2022-10-24 15:46:56 +02:00
  • b47c2a270b chore(scripts): when running in non-interactive mode, do not enable neither start any driver. Federico Di Pierro 2022-10-14 09:05:38 +02:00
  • 46355038bb chore(scripts,cmake): dialog is an optional dep, do not list it among deps. Federico Di Pierro 2022-10-13 08:45:22 +02:00
  • 45914636f5 chore(cmake): dkms is actually needed by falco driver loader. Federico Di Pierro 2022-10-12 17:28:47 +02:00
  • ea04955e2c cleanup(scripts): allow falco-driver-loader script to manage more gcc versions. Federico Di Pierro 2022-10-12 17:20:01 +02:00
  • 56ef24b4af new(scripts): allow rpm/deb users to decide at configure time which driver to use (kmod or ebpf). Federico Di Pierro 2022-10-12 15:43:38 +02:00
  • 48b39d39a1 new(scrips): improve systemd units for rpm and debian. Federico Di Pierro 2022-10-10 14:54:42 +02:00
  • 84effdcf2d update: add parallel build Andrea Terzolo 2022-11-06 20:08:22 +01:00
  • c22b3b5195 REMOVE: introduce new GH job to build modern BPF packages Andrea Terzolo 2022-11-06 15:03:32 +01:00
  • aa715b20f8 REMOVE: add a local dockerfile to push temp docker images for modern BPF Andrea Terzolo 2022-11-06 13:31:20 +01:00
  • cad172cbe5 ci: introduce new CircleCI jobs to build modern BPF Andrea Terzolo 2022-11-06 13:31:04 +01:00
  • 2db6c033cc chore: bump libs version Andrea Terzolo 2022-11-06 13:21:37 +01:00
  • 136eacc17f chore(scripts): when ENABLE_COMPILE is disabled, exit immediately if target distro could not be fetched. Federico Di Pierro 2022-09-27 10:14:25 +02:00
  • c0c0246927 fix(scripts): force falco-driver-loader script to try to compile the driver anyway even on unsupported platforms. Federico Di Pierro 2022-09-22 11:18:08 +02:00
  • acf5c4ce5f fix(engine): save syscall source only when processing events Mark Stemm 2022-10-25 10:02:22 -07:00
  • c986c1491f chore(docker): fixup check for HOST_ROOT. fix/docker_img_host_root_runtime Federico Di Pierro 2022-10-25 10:26:20 +02:00
  • 4a4fa2592b fix(plugins): trim whitespace in open_params Yarden Shoham 2022-10-19 20:00:04 +00:00
  • d0467de0a7 fix(ci): fixed version bucket for release jobs. Federico Di Pierro 2022-10-19 14:39:56 +02:00
  • 44d1c1eb65 fix(ci): fixed version bucket for release jobs. 0.33.0 release/0.33.0 Federico Di Pierro 2022-10-19 14:39:56 +02:00
  • c1be1496d3 update(CHANGELOG.md): change release date Jason Dellaluce 2022-10-19 10:07:49 +02:00
  • fa1a5d58e6 update(changelog.md): add entry for Falco 0.33.0 Jason Dellaluce 2022-10-17 10:35:49 +00:00
  • 62abefddf6 chore: bump libs version Andrea Terzolo 2022-10-14 14:23:44 +02:00
  • 784fa8b374 chore: bump plugin version Andrea Terzolo 2022-10-14 13:38:45 +02:00
  • 10fe9fd84b fix(userspace/falco): avoid using CPU when main thread waits for parallel event sources Jason Dellaluce 2022-10-14 10:22:13 +00:00
  • 3d7677ce5b update(userspace/falco): create struct for sync parallel event sources parallelization Jason Dellaluce 2022-10-14 10:20:01 +00:00
  • 0fd765f7c3 new(userspace/falco): add simple semaphre implementation Jason Dellaluce 2022-10-14 10:15:53 +00:00
  • cca90b2f80 update(userspace/falco): move on from deprecated libs API for printing event list Jason Dellaluce 2022-10-13 13:18:35 +00:00
  • 6c873418ce chore(userspace/falco): improve the CLI options helper Jason Dellaluce 2022-10-13 11:19:19 +00:00
  • f12531a153 chore(userspace/falco): log cli options with debug level Jason Dellaluce 2022-10-13 11:19:01 +00:00
  • d5e3085b54 chore: bump to latest libs commit Andrea Terzolo 2022-10-12 16:01:12 +00:00
  • 90d6d9080a fix: inject kmod script Andrea Terzolo 2022-10-12 13:55:46 +00:00
  • 7d28637f44 fix(test): fix regresstion test Jason Dellaluce 2022-10-12 11:11:08 +00:00
  • 9d8f130f47 fix(userspace/falco): make sure validation summary is populated even when json output is requested Jason Dellaluce 2022-10-12 09:54:34 +00:00
  • 9ee0298c4d fix(userspace/engine): avoid macro/list used checks if we encounter an error Jason Dellaluce 2022-10-12 09:54:04 +00:00
  • 7da30ca661 chore(userspace/falco): make logging optional when terminating, restarting, and reopening outputs Jason Dellaluce 2022-10-12 10:23:48 +00:00
  • 12d709b8b1 chore: bump libs version Andrea Terzolo 2022-10-11 15:56:29 +00:00
  • 57b26530b6 update(userspace) fix cppcheck warnings Jason Dellaluce 2022-10-12 09:20:44 +00:00
  • 3629c4dc4a update(userspace): solve cppcheck performance suggestions Jason Dellaluce 2022-10-12 08:51:47 +00:00
  • 5e531870a9 fix(userspace/engine): fix unit test segfault Jason Dellaluce 2022-10-12 08:17:46 +00:00
  • c2dc0a7259 test(engine): fix unit tests Jason Dellaluce 2022-10-11 16:06:46 +00:00
  • f684e144be chore(userspace/falco): polish ignored event warning message Jason Dellaluce 2022-10-11 14:55:24 +00:00
  • a4218a4b4f fix(userspace/falco): print right list in ignored events warning Jason Dellaluce 2022-10-11 14:41:13 +00:00