-
Currently, `macaw-symbolic`'s [`lookupSyscallHandle`](https://github.com/GaloisInc/macaw/blob/645754178a034c22e97aac49a962c99b387aaa01/symbolic/src/Data/Macaw/Symbolic.hs#L1126-L1128) memory model ope…
-
[`archFnHasSideEffects`](https://github.com/GaloisInc/macaw/blob/83d3907054181b17be365bdea9abb25edd48aae3/base/src/Data/Macaw/CFG/DemandSet.hs#L43-L47) classifies whether a primitive function has impl…
-
Certain [syscalls](https://docs.starknet.io/documentation/architecture_and_concepts/Smart_Contracts/system-calls-cairo1/) are missing from the docs like `secp256r1` and `secp256k1`.
-
**Motivation**
For specialized detections we could benefit from fully supporting and parsing the following syscalls.
- [ ] `fallocate` CC @Molter73
- [ ] `ftruncate` CC @Molter73
- [ ] `fsop…
-
**Motivation**
I think we need an issue to track all the missing syscalls that can have a security value for `Falco`. I detected these ones right now:
- [x] `fsconfig` https://github.com/falcos…
-
## Expected Behavior
When lstat is called by a process inside PRoot they would be caught and sent information on the current guest they are in.
## Actual Behavior
lstat calls go directly to t…
-
Hi,
I tried to build the binary files of test of gvisor to run them on the Quark when our system is arm. The instruction is that you just need to follow [this](https://github.com/google/gvisor/tree…
-
Triggered by a discussion (in [June](https://lists.freedesktop.org/archives/systemd-devel/2020-June/044755.html) & [Aug](https://lists.freedesktop.org/archives/systemd-devel/2020-August/045038.html)) …
-
Hello,
I tried the part of your project called "NtUserGetAsyncKeyState" with the direct syscalls. Unfortunately, after running the keylogger, I realised that it didn't work. So I decided to investi…
-
NOTE: This bug is also causing frequent failures in ginkgo tests for docker.
## Bug Report
**General Information**
- Environment description: k3s with docker
```
vagrant@kubearmor-dev-n…