Commit Graph

  • b90164bac1 update(userspace): engine atomic and express lifecycle with a namespace Lorenzo Fontana 2020-11-26 19:40:42 +01:00
  • 538e7286bc new(userspace): libhawk lifecycle destruction management Lorenzo Fontana 2020-11-24 15:38:02 +01:00
  • 344b8c002c new(userspace): initial lifecycle implementation Lorenzo Fontana 2020-11-19 16:00:26 +01:00
  • f87e6f1871 chore: restore the classic flags for a future refactor for the new functionalities Lorenzo Fontana 2020-11-09 17:15:40 +01:00
  • cd71f62f04 update(userspace): pointer to pointer in hawk_engine rules_cb Lorenzo Fontana 2020-11-04 13:58:50 +01:00
  • 458f7ccd3b new(userspace): use conditional_variable to signal when we have a ready-to-use (with rules) falco engine Leonardo Di Donato 2020-10-30 13:30:25 +00:00
  • 305cb62162 new(userspace/falco): destroy rules watcher when needed Leonardo Di Donato 2020-10-29 11:33:10 +00:00
  • 1a5a55a002 new(userspace): make hawk_watch_rules aware of the engine Leonardo Di Donato 2020-10-29 10:58:23 +00:00
  • 387908d075 new(userspace): initial draft for libhawk Lorenzo Fontana 2020-10-16 13:18:33 +02:00
  • b76420fe47 Fix various typos in markdown files. Didier Durand 2020-12-30 14:17:33 +01:00
  • 2883df5808 docs: move governance to falcosecurity/.github Leonardo Grasso 2021-01-18 10:50:39 +01:00
  • 8c4040b610 Also include all exception fields in rule_result Mark Stemm 2021-01-07 17:34:00 -08:00
  • 49b8f87db4 Make the req. engine version 8 for k8s_audit rules Mark Stemm 2021-01-07 14:33:44 -08:00
  • cd8234d8b3 Remove falco_tests.yaml from gitignore Mark Stemm 2020-11-17 11:52:55 -08:00
  • e6b0d2697f Use the right not equals operator. Mark Stemm 2020-11-16 14:07:09 -08:00
  • 987ececa54 Remove test case for unknown objects. Mark Stemm 2020-10-15 15:50:28 -07:00
  • 7f4afffe3e Remove old unused macros/lists Mark Stemm 2020-10-14 19:26:18 -07:00
  • 91bfa379ce Properly note lists in other lists as used Mark Stemm 2020-10-14 19:13:15 -07:00
  • 64a231b962 Add exceptions fields/comps/values to rules files Mark Stemm 2020-10-13 17:36:36 -07:00
  • 7b030727a2 Bump falco engine version to 8 for exceptions. Mark Stemm 2020-10-12 15:46:54 -07:00
  • b2eb3ec345 Don't look for event counts with -V/validate Mark Stemm 2020-10-02 16:52:44 -07:00
  • b4eb5b87b6 Automated tests for exceptions Mark Stemm 2020-10-02 16:51:43 -07:00
  • a582599778 Support exceptions properties on rules Mark Stemm 2020-09-17 18:21:00 -07:00
  • 3fb1d207e2 Update tests expected outputs Mark Stemm 2020-10-02 16:54:55 -07:00
  • 4f192e89fa Allow unknown top level objs as warnings Mark Stemm 2020-09-17 16:18:31 -07:00
  • 07abb89f36 Pass back warnings when loading rules Mark Stemm 2020-09-17 16:02:42 -07:00
  • 7691dba3ff fix(userspace/falco): output needs to be initialized after fork 0.27.0 Lorenzo Fontana 2021-01-18 15:40:18 +01:00
  • c736689f6f docs(RELEASE.md): link the ecr images in releases Lorenzo Fontana 2021-01-18 13:18:07 +01:00
  • 3bcd2ca70d update(.circleci): fix tag definition for ECR image push on releases Lorenzo Fontana 2021-01-18 14:53:17 +01:00
  • 2e443e7660 build(.circleci): temporarly disable static analysis Lorenzo Fontana 2021-01-18 12:39:38 +01:00
  • bec5121fa4 docs(CHANGELOG.md): release notes for 0.27.0 Lorenzo Fontana 2021-01-18 12:20:11 +01:00
  • ee0b7daba0 docs(RELEASE.md): remove url, it does not work anymore Lorenzo Fontana 2021-01-18 12:19:54 +01:00
  • b2bbb265b4 chore(cmake): remove unnecessary whitespace patch Leonardo Grasso 2021-01-13 15:56:41 +01:00
  • 0d7068b048 docs(.circleci): adding Jonah to Falco CI maintainers Leo Di Donato 2021-01-11 11:23:31 +01:00
  • b0180de545 docs(README): correct badge link path to fix docs rendering build/docs Leonardo Grasso 2021-01-12 11:40:30 +01:00
  • 7f33b08634 rule(Create Hidden Files or Directories): Exclude exe_running_docker_save James Barlow 2020-09-08 17:24:53 +01:00
  • c2a05b3e64 rule(Mkdir binary dirs): Exclude exe_running_docker_save James Barlow 2020-09-08 17:23:38 +01:00
  • 581d67fa08 docs(proposals/20200828-structured-exception-handling): indentation Leonardo Grasso 2020-11-11 16:40:38 +01:00
  • b7bda6d892 docs(proposals/20200828-structured-exception-handling): highlight syntax Leonardo Grasso 2020-11-11 16:33:19 +01:00
  • 5eec26976d Add notes on single-field exceptions Mark Stemm 2020-10-13 16:07:38 -07:00
  • 1916314583 Use well-defined object keys Mark Stemm 2020-10-02 10:35:30 -07:00
  • 8831c7f3c7 Add notion of exception operators Mark Stemm 2020-10-01 16:14:44 -07:00
  • 2cebe052a1 Address feedback Mark Stemm 2020-09-02 09:25:08 -07:00
  • 05282f3976 Proposal on better exception handling Mark Stemm 2020-08-28 13:50:05 -07:00
  • da4a5b1456 chore(.circleci): typos Leo Di Donato 2020-12-24 14:48:11 +01:00
  • 36e9c2ba17 chore(.circleci): switch to falcosecurity slug for AWS ECR registry Leo Di Donato 2020-12-24 14:46:45 +01:00
  • 0c8b4a2127 chore(.circleci): test out container image publish for a specific Falco development version Leonardo Di Donato 2020-12-17 13:21:40 +00:00
  • 356b3e1451 new(.circleci): publish Falco development container images (from master) to AWS ECR Public Leonardo Di Donato 2020-12-17 11:45:22 +00:00
  • 9eb60f04ff chore: refinements Leonardo Di Donato 2020-12-16 18:04:33 +00:00
  • ff29188cb2 ci: add job to publish container images to AWS ECR registry Leonardo Di Donato 2020-12-16 17:55:08 +00:00
  • 4fb7e99c68 docs: fix a broken link of README Naoki Oketani 2021-01-03 21:22:16 +09:00
  • d76eec5f9e build(documentation): generate docs target Leonardo Di Donato 2020-12-24 15:26:56 +00:00
  • eabd8b677b new(documentation): navbar config Leonardo Di Donato 2020-12-24 15:26:23 +00:00
  • fc6d39767f new(documentation): about page skeleton (for Falco development docs) Leonardo Di Donato 2020-12-24 15:23:31 +00:00
  • c24f3c276b new(documentation): doxygen configuration Leonardo Di Donato 2020-12-24 15:23:05 +00:00
  • d9cd2f1bb7 build(cmake/modules): introduce CPM Leonardo Di Donato 2020-12-24 15:22:16 +00:00
  • 4616be1183 update(userspace/falco): initial CLI porting to cxxopts update/cli Leonardo Di Donato 2020-12-16 14:24:32 +00:00
  • dcbc509887 chore(userspace/falco): temporarily disabling the CLI and the startup Leonardo Di Donato 2020-12-16 14:24:06 +00:00
  • fa6e143a25 build(cmake/modules): download cxxopts lib Leonardo Di Donato 2020-12-16 14:23:01 +00:00
  • d03a1f4a9b feature(grpc): Add engine version to version svc Spencer Krum 2020-12-11 22:03:49 +00:00
  • 574e7f433b docs(README.md): correct broken links Leonardo Grasso 2020-12-11 15:39:05 +01:00
  • f6fa18e7ec chore(cmake): mark some variables as advanced Angelo Puglisi 2020-11-25 09:58:29 +01:00
  • 6beb9838d6 rule(list user_known_change_thread_namespace_binaries): add crio and multus to the list kaizhe 2020-12-03 13:27:39 -08:00
  • 9a175cb1db chore(cmake/modules): avoid useless rebuild Angelo Puglisi 2020-11-24 18:32:56 +01:00
  • 32daac3e4d fix(config): Error out when no config file supplied Spencer Krum 2020-11-23 22:56:55 +00:00
  • d0a1d4d75d update: reference for the logo update/logo Lorenzo Fontana 2020-12-09 18:36:22 +01:00
  • 0a901e4f52 add exception macro kaizhe 2020-12-03 13:24:36 -08:00
  • 22732e9edb rule(Container Run as Root User): new rule created kaizhe 2020-12-02 12:57:22 -08:00
  • 75f967d5c0 Add CodeQL Security Scanning caniszczyk-patch-1 Chris Aniszczyk 2020-12-02 10:44:45 -08:00
  • 6a352338e3 update(userspace/falco): output worker should not throw exceptions Leonardo Grasso 2020-11-30 10:54:33 +01:00
  • f8b66d051b fix(userspace/falco) class naming convention Leonardo Grasso 2020-11-27 13:58:10 +01:00
  • c237ddc738 chore(userspace/falco): apply suggestions from review Leonardo Grasso 2020-11-27 13:52:28 +01:00
  • 9d31164a71 update(userspace/falco): clear output queue if still blocked during the shutdown Leonardo Grasso 2020-11-25 12:33:36 +01:00
  • f433b449d9 chore(userspace/falco): add_output init check Leonardo Grasso 2020-11-18 15:08:02 +01:00
  • 44955004e3 chore(userspace/falco): handle freeing of output objects Leonardo Grasso 2020-11-18 12:14:47 +01:00
  • a9dac551b8 docs(falco.yaml): better explanation on "output_timeout" Leonardo Grasso 2020-11-10 15:53:03 +01:00
  • df8e4e0545 new: Falco config for output timeout Leonardo Grasso 2020-11-06 17:26:31 +01:00
  • 321da3e5bf chore(userspace/falco): configurable outputs timeout Leonardo Grasso 2020-11-06 17:25:46 +01:00
  • 4b34b83739 new(userspace/falco): add "output_timeout" config node Leonardo Grasso 2020-11-06 17:24:41 +01:00
  • 5b558cd600 update(userspace/falco): watchdog for outputs Leonardo Grasso 2020-11-03 18:24:13 +01:00
  • 3b7401c2e5 new(userspace/falco): Watchdog timer utility Leonardo Grasso 2020-11-03 18:07:35 +01:00
  • aea12f4f3b update(userspace/falco): outputs error handling Leonardo Grasso 2020-11-02 11:56:06 +01:00
  • f2637c8600 update(userspace/falco): add accessor method for output's name Leonardo Grasso 2020-10-30 18:54:06 +01:00
  • 0a14d34e16 chore(userspace/falco): correct exception message Leonardo Grasso 2020-10-29 16:04:04 +01:00
  • a1bdf3ed61 update(userspace/falco): add "internal" source to outputs and proto Leonardo Grasso 2020-10-19 17:45:58 +02:00
  • d3c41c2d97 chore(userspace/falco): avoid multiple outputs init Leonardo Grasso 2020-10-19 15:21:46 +02:00
  • 90d71a8e92 feat(userspace/falco): non-blocking outputs Leonardo Grasso 2020-10-19 14:55:24 +02:00
  • 8eb7d83ee8 update(userspace/falco): introduce message struct for outputs Leonardo Grasso 2020-10-19 14:47:27 +02:00
  • 0f0808dd8d build: add cmake module for spdlog new/logger Leonardo Grasso 2020-11-24 10:30:22 +01:00
  • 3b78cda716 fix(docs): Broken outputs.proto link deepskyblue86 2020-11-23 13:59:47 +01:00
  • 6ca4e11d8c update(docker): correct container labels Leonardo Grasso 2020-11-19 12:25:52 +01:00
  • 6bc97ca9e7 fix(docker/no-driver): add missing HOST_ROOT env Leonardo Grasso 2020-11-19 12:06:28 +01:00
  • 71e56ac87c update(.github): remove stale bot in favor of lifecycle bot (prowjobs) Leo Di Donato 2020-11-17 17:53:52 +01:00
  • 12b7ff9940 build: BUILD_BYPRODUCTS for civetweb Lorenzo Fontana 2020-11-16 16:21:34 +01:00
  • 648bb6294f fix(cmake/modules): patch the max_consumers parameter of the kernel-module Falco driver Leonardo Di Donato 2020-11-13 10:18:39 +00:00
  • d469681bb1 wip new/inspect-per-cpu Leonardo Di Donato 2020-11-12 12:14:32 +00:00
  • dada3db3f2 docs: adding the kubernetes privileged use case to use cases Lorenzo Fontana 2020-11-12 17:06:26 +01:00
  • 7258910a7c fix(.circleci): map the user new/ci-build-aarch64 Leonardo Di Donato 2020-11-11 15:25:12 +00:00
  • 2b2856299c rule(macro user_known_k8s_client_container): separate list of k8s images DingGGu 2020-11-11 13:37:05 +09:00
  • ec5b42074e rule(macro user_known_k8s_ns_kube_system_images): add new macro image name inside kube-system namespace DingGGu 2020-11-11 13:35:04 +09:00