Mark Stemm 5740186280 Support container event to denote container starts (#550) ...

* Add support for container metaevent to detect container spawning

Create a new macro "container_started" to check both the old and
the new check.
Also, only look for execve exit events with vpid=1.

* Use TBB_INCLUDE_DIR for consistency w sysdig,agent

Previously it was a mix of TBB_INCLUDE and TBB_INCLUDE_DIR.

* Build using matching sysdig branch, if exists

2019-03-08 13:23:10 -08:00

..

engine

Support container event to denote container starts (#550)

2019-03-08 13:23:10 -08:00

falco

Support container event to denote container starts (#550)

2019-03-08 13:23:10 -08:00