-
1. Missing `HOST_ROOT` env in initContainers `falco-driver-loader`
```yaml
env:
- name: HOST_ROOT
value: /host
```
2.
For completeness suggest explicitly adding `HOST_ROOT` env to the f…
-
**Describe the bug**
When attempting to run falco on a kubernetes cluster with an IPv6 based networking scheme and a `KUBERNETES_SERVICE_HOST` variable that evaluates to: `https://fdf3:84f9:f47b::1` …
-
👋 trying to build the latest release, but run into some build issue. The error log is as below:
error build log
```
[ 76%] Building CXX object userspace/sysdig/CMakeFiles/csysdig.dir/csys…
-
**Motivation**
Proposing to add subtle extensions to Falco's rules expression language in order to make event filtering even more powerful and more convenient to use while not sacrificing performan…
-
In the falco alerts "Unexpected setuid call by non-sudo events contain no details" is comming all
00:40:51.862247143: Notice Unexpected setuid call by non-sudo, non-root program (contain…
-
While troubleshooting vanilla Falco and previous memory related issues it
proved to be useful to have an understanding how the thread cache is growing.
To make it more visible, expose the current thre…
-
I downloaded the source code package of sysdig version [0.34.1](https://github.com/draios/sysdig/archive/refs/tags/0.34.1.zip), and I encountered an error during compilation:
```
cmake ..
-- Libs v…
-
As stated in the most recent libs stats refactor/extension PR #1433: https://github.com/falcosecurity/libs/pull/1433#issue-1955107915, I am creating this issue to track future refactors that, instea…
-
**Motivation**
In the past, I opened an issue in the Plugin SDK Go (https://github.com/falcosecurity/plugin-sdk-go/issues/24) reporting that current plugin have no way to log messages in a standard…
-
Hello guys,
I was evaluating falco as solution for tracking privilege activities on Linux hosts and observed an unexpected behaviour.
**Bug details**
For any privileged command like `sudo cat…