Commit Graph

  • d11aec28d5 fix(userspace/falco): move stats collection in event success path Jason Dellaluce 2022-09-01 12:59:09 +00:00
  • d17e173e35 chore(userspace/falco): rename sources app state list for more clarity Jason Dellaluce 2022-08-30 16:11:49 +00:00
  • 25e9bd1c91 chore(userspace/falco): fix codespell typo Jason Dellaluce 2022-08-30 14:18:48 +00:00
  • 4bc9fc74c8 update(userspace/falco)!: adapt stats writer for multiple parallel event sources Jason Dellaluce 2022-08-30 14:01:37 +00:00
  • b65cc49221 update(userspace/falco): rename init_inspector action into init_inspectors Jason Dellaluce 2022-08-30 13:00:04 +00:00
  • ce769b1fbe fix(test): adapt plugin tests to new error msgs and features Jason Dellaluce 2022-08-30 12:58:55 +00:00
  • 65993ad1ed refactor(userspace/falco): support multiple parallel event processing loops Jason Dellaluce 2022-08-30 12:58:25 +00:00
  • f4c6a81ed8 update(userspace/falco): fix plugin list access in rule file loading action Jason Dellaluce 2022-08-30 12:50:30 +00:00
  • f9a152b24c refactor(userspace/falco): generalize responsibilities of init_inspector action Jason Dellaluce 2022-08-30 12:49:36 +00:00
  • ed025f1a86 refactor(userspace/falco): init all event sources in falco engine and in the right order Jason Dellaluce 2022-08-30 12:45:57 +00:00
  • 8ba779de8c refactor(userspace/falco): restrict load_plugins action responsibilities Jason Dellaluce 2022-08-30 12:44:40 +00:00
  • cf8b85ad86 refactor(userspace/falco): turn open inspector action into convenience private methods Jason Dellaluce 2022-08-30 12:42:00 +00:00
  • 9cf3d118f6 update(userspace/falco): restrict clients init action to syscall inspector only Jason Dellaluce 2022-08-30 12:41:13 +00:00
  • 63bdc1119f cleanup(userspace/falco): remove legacy hacks on source selection action Jason Dellaluce 2022-08-30 12:40:43 +00:00
  • 9dc3eb2fc6 update(userspace/falco): reorder actions for their new semantics Jason Dellaluce 2022-08-30 12:39:53 +00:00
  • 7bb319b21e update(userspace/falco): add convenience method for merging app run results Jason Dellaluce 2022-08-30 12:39:20 +00:00
  • 3f7d61f150 refactor(userspace/falco): re-design application state and methods Jason Dellaluce 2022-08-30 12:38:57 +00:00
  • cf9baea624 fix(userspace/engine): avoid reading duplicate exception values Jason Dellaluce 2022-09-12 11:29:38 +00:00
  • ccd3c896de fix(userspace/engine): properly include stdexcept header to fix build. Federico Di Pierro 2022-09-09 14:38:12 +02:00
  • 912709b3ca wip: testing Falco 0.32.2 with mitigation/falco/issue/1909 branch of libs testing/falco-0-32-3/issue/1909 Leonardo Grasso 2022-09-09 17:34:29 +02:00
  • 2332552bf0 wip: testing Falco 0.32.2 with test/fix/falco/1909 branch of libs Leonardo Grasso 2022-09-09 12:16:36 +02:00
  • 3f0b0aa561 wip: testing Falco 0.32.2 with test/fix/falco/1909 branch of libs Leonardo Grasso 2022-09-09 10:33:44 +02:00
  • 11644ecafc chore(userspace/falco): be somewhat more portable, avoiding assuming that '/' is the path delim. Federico Di Pierro 2022-09-05 16:15:51 +02:00
  • 23df49a47f new(userspace/falco): create grpc unix socket and gvisor endpoint path automatically. Federico Di Pierro 2022-09-02 16:43:02 +02:00
  • 45e82bfb80 wip: testing Falco 0.32.2 with test/fix/falco/1909 branch of libs Leonardo Grasso 2022-09-08 23:12:52 +02:00
  • 3e1ef070b8 fix(circleci): falco-driver-loader image build must be done starting from just-pushed falco master image. Federico Di Pierro 2022-09-07 14:34:14 +02:00
  • 670b0733de apply suggestions from the review Aldo Lacuku 2022-09-05 15:05:40 +02:00
  • 752c3d8332 update(scripts/falco-driver-loader): minikube environment is now correctly detected Aldo Lacuku 2022-09-05 09:36:44 +02:00
  • daba85b61c update(scripts/falco-driver-loader): make some config variables configurable using env variables Aldo Lacuku 2022-09-05 09:33:58 +02:00
  • 103d7e08b8 Update tests for rules loading (item names) Mark Stemm 2022-08-22 17:31:19 -07:00
  • 0f45cf49db Use enums for rules content item type Mark Stemm 2022-08-22 16:15:48 -07:00
  • 7a5a4c32ee Support condition parse errors in rule loading results Mark Stemm 2022-08-02 17:32:55 -05:00
  • af95455bab dropping fix for list parsing due to the absence of regex portability. reverting to the inefficient code. VadimZy 2022-08-11 07:37:41 -07:00
  • 4b75f213c6 use <onigposix.h> instead of <regex.h> VadimZy 2022-08-11 00:11:05 -07:00
  • 0de617a7fb remove sinsp.h public dependencies VadimZy 2022-08-10 20:11:51 -07:00
  • 5745faeccc fix tests, remove dead code VadimZy 2022-08-10 19:59:46 -07:00
  • f9ee45b38e Improve Falco engine performance when loading rules and creating the rule sets - replace std::set<uint16_t> with fixed size vector in event types propagation - rework lists expansion by replacing repetitive string::find in constantly growing expansion string with regex tokenization - improve json_event parsing by moving const initializations into static routines VadimZy 2022-08-10 15:12:09 -07:00
  • 7d2f82fddc update(usperspace/engine): bump engine version to 15 Jason Dellaluce 2022-09-05 07:47:17 +00:00
  • 0956bac0de tests: add unit tests for plugin requirements checks in the engine Jason Dellaluce 2022-09-05 07:36:47 +00:00
  • 1b410ea2cc update(userspace/engine): consider plugin version requirements in engine checks Jason Dellaluce 2022-09-05 07:36:24 +00:00
  • 52402ac805 update(userspace/engine): support plugin version requirement alternatives in rule reader Jason Dellaluce 2022-09-05 07:33:47 +00:00
  • 6e0971f1e1 update(userspace/engine): support plugin version requirement alternatives in rule loader Jason Dellaluce 2022-09-05 07:32:23 +00:00
  • 934ae2f1a6 update(OWNERS): add Andrea Terzolo to owners Andrea Terzolo 2022-08-31 19:03:56 +02:00
  • fab95f38a9 update(.circleci): re-enabled cppcheck Leonardo Grasso 2022-09-01 17:06:18 +02:00
  • 0be0191c53 Add StackRox to adopters Mauro Ezequiel Moltrasio 2022-09-01 17:09:31 +02:00
  • 5dcc329339 chore(rules): change FALCO_ENGINE_VERSION to 13 Melissa Kilby 2022-08-28 11:53:16 -07:00
  • 721aa30e80 cleanup(rules): cleanup redundant use of always_true macros - 2 Melissa Kilby 2022-08-28 11:44:47 -07:00
  • 565ddd70d3 cleanup(rules): cleanup rules disabled by default - 4 Melissa Kilby 2022-08-28 11:42:13 -07:00
  • 23d7c6c345 wip: testing https://github.com/falcosecurity/libs/pull/567 test/libs/pr/567 Leonardo Grasso 2022-09-01 12:48:27 +02:00
  • c000695816 docs(README.md): cross linking resources and minor improvements Leonardo Grasso 2022-08-31 14:22:13 +02:00
  • d67edeb39d docs(README.md): update URLs Leonardo Grasso 2022-08-31 14:00:20 +02:00
  • 1a22bfc654 docs(README.md): remove client-rs and client-py SDKs Leonardo Grasso 2022-08-31 13:58:55 +02:00
  • bd865450ef new(scripts): improved falco-driver-loader supporting any ubuntu flavor. Federico Di Pierro 2022-08-26 10:59:20 +02:00
  • 98b8e390a1 chore(rules): fix old url redirection Jason Dellaluce 2022-08-29 11:18:01 +00:00
  • 6c1f908ca5 cleanup(cmake): rename legacy cmake variables Jason Dellaluce 2022-08-29 11:14:47 +00:00
  • 574a4b9f0a update(userspace/falco): fix copyright notice year Jason Dellaluce 2022-08-26 11:36:13 +02:00
  • c05ad6fde4 update(userspace/falco): fix copyright notice year Jason Dellaluce 2022-08-26 11:36:06 +02:00
  • e361069092 chore(userspace/falco): fix typos Jason Dellaluce 2022-07-01 13:57:29 +00:00
  • 9c6ad6ce84 update(userspace/falco): use json lib in stats writer Jason Dellaluce 2022-07-01 13:04:04 +00:00
  • 2d8efee73e refactor(userspace/falco): improve design and docs of stats writer Jason Dellaluce 2022-07-01 12:49:27 +00:00
  • 28ff6ad3bd refactor(userspace/falco): rename stats writer source files Jason Dellaluce 2022-07-01 10:30:19 +00:00
  • 2f5461bed0 refactor(userspace/falco): use new stats writer in event processing action Jason Dellaluce 2022-07-01 10:29:01 +00:00
  • 605dd2816d refactor(userspace/falco): re-implement stats writer Jason Dellaluce 2022-07-01 10:26:47 +00:00
  • c5442ccb41 new(userspace/falco): introduce new refactored stats writer class Jason Dellaluce 2022-07-01 10:16:38 +00:00
  • 9646308651 update(test): use event source selection in plugins tests Jason Dellaluce 2022-06-22 15:49:54 +00:00
  • e15d9f6f51 update(test): use event source selection in k8s audit tests Jason Dellaluce 2022-06-22 15:45:05 +00:00
  • ce0dd918fb refactor(test): enable selecting event sources in regression test suite Jason Dellaluce 2022-06-22 15:44:21 +00:00
  • cc4ccc40d7 refactor(userspace/falco): implement complete event source selection Jason Dellaluce 2022-06-22 15:29:10 +00:00
  • 0e2a053151 new(userspace/falco): add new cli option to selectively enable event sources Jason Dellaluce 2022-06-22 14:46:47 +00:00
  • 97bf0338b9 refactor(userspace/falco): introduce standalone action for event source selection Jason Dellaluce 2022-06-22 14:35:22 +00:00
  • 6c12cc655e cleanup(rules): cleanup redundant use of always_true macros Melissa Kilby 2022-08-22 00:09:49 -07:00
  • 7387fffcef cleanup(rules): cleanup rules disabled by default - 3 Melissa Kilby 2022-08-17 21:12:31 -07:00
  • 34ca78786a refactor(userspace/falco): make signal handlers thread-safe Jason Dellaluce 2022-06-23 11:10:33 +00:00
  • f2aba88a6c refactor(userspace/falco): ensure falco outputs are non-blocking and define exiting condition Jason Dellaluce 2022-06-23 11:08:43 +00:00
  • bc765f1b7d chore(userspace/falco): log in signal handlers instead than in event processing loop Jason Dellaluce 2022-06-23 10:13:12 +00:00
  • c2a8efc329 chore(userspace/engine): fix typos Jason Dellaluce 2022-06-22 08:23:57 +00:00
  • 978f192c38 chore(userspace/engine): fix codespell typos Jason Dellaluce 2022-06-21 17:30:11 +00:00
  • 1120fb2564 doc(userspace/engine): define thread-safety guarantees of falco_engine::process_event Jason Dellaluce 2022-06-21 17:06:39 +00:00
  • 1b8847c06b refactor(userspace/engine): make stats manager thread-safe for on_event method Jason Dellaluce 2022-06-21 16:50:04 +00:00
  • 3839fdca1e update(userspace/falco): avoid using zlib in webserver Jason Dellaluce 2022-07-12 09:41:00 +00:00
  • f599fab439 update(falco.yaml): update default configuration and its comments Jason Dellaluce 2022-06-23 09:16:57 +00:00
  • 2b7bcc87a7 update(userspace/falco): add configuration entry for webserver threadiness Jason Dellaluce 2022-06-23 09:16:26 +00:00
  • 0eacd41cd5 refactor(userspace/falco): support zlib and custom threadiness in webserver Jason Dellaluce 2022-06-23 08:59:49 +00:00
  • d9b6473db2 refactor(userspace/engine): increase const coherence of falco engine Jason Dellaluce 2022-06-22 08:50:36 +00:00
  • a6137e9475 update(rules): Directory traversal monitored file read - include failed open attempts w/ new macro open_file_failed Melissa Kilby 2022-08-21 23:44:49 -07:00
  • dd49038b0d cleanup(rules): Directory traversal monitored file read Melissa Kilby 2022-08-03 13:59:58 -07:00
  • 6efc5b42f7 new(rules): Directory traversal monitored file read Melissa Kilby 2022-07-15 08:47:50 -07:00
  • 7d3dacc6d7 refactor(userspace/falco): cleanup actions order Jason Dellaluce 2022-06-28 12:18:29 +00:00
  • a9d185f5e1 refactor(userspace/falco): drop inspector dependency on print_plugin_info action Jason Dellaluce 2022-06-28 12:17:34 +00:00
  • bd26bc09c2 refactor(userspace/falco): drop inspector dependency on print_ignored_events action Jason Dellaluce 2022-06-28 12:17:09 +00:00
  • 97e3209222 refactor(userspace/falco): drop inspector dependency on load_rule_files action Jason Dellaluce 2022-06-28 12:16:52 +00:00
  • 6d30061576 refactor(userspace/falco): drop inspector dependency on list_plugins action Jason Dellaluce 2022-06-28 12:16:31 +00:00
  • 2caadd1af5 refactor(userspace/falco): add action for printing syscall events Jason Dellaluce 2022-06-28 12:14:16 +00:00
  • b307853e39 update(userspace/falco): use move semantics in falco logger Jason Dellaluce 2022-06-27 13:17:30 +00:00
  • 8e8491f280 update(test/output_files): add "hostname" to fixture Leonardo Grasso 2022-08-23 18:52:46 +02:00
  • 3d61d3427e fix: correct env var name FALCO_HOSTNAME Leonardo Grasso 2022-08-23 17:04:40 +02:00
  • 928e10f0ce fix(userspace/falco): print hostname when json formating is enabled Leonardo Grasso 2022-08-23 16:47:15 +02:00
  • 34ad5c43fb update(userspace/engine): add support for hostname Leonardo Grasso 2022-08-23 16:46:36 +02:00
  • f7b662f936 update(cmake): bump libs and driver version to 6599e2efebce30a95f27739d655d53f0d5f686e4 Jason Dellaluce 2022-08-25 13:10:05 +00:00
  • 45bf4db077 fix(cmake/libs): enforce using bundled re2 Jason Dellaluce 2022-08-25 10:04:09 +00:00