-
Good day. Have found next issue in new sinsp_suppress class.
Starting from this commit (https://github.com/falcosecurity/libs/commit/1054418f33d027a1525ba0d8bc2a60be1ecd3afe) suppressed logic was m…
-
**Motivation**
Opening this issue first with the intention of seeking clarifications. Based on the answers received, there may or may not be a need to request an expansion or improvement of the plu…
-
**Describe the bug**
When attempting to run falco on a kubernetes cluster with an IPv6 based networking scheme and a `KUBERNETES_SERVICE_HOST` variable that evaluates to: `https://fdf3:84f9:f47b::1` …
-
1. Missing `HOST_ROOT` env in initContainers `falco-driver-loader`
```yaml
env:
- name: HOST_ROOT
value: /host
```
2.
For completeness suggest explicitly adding `HOST_ROOT` env to the f…
-
Hi everyone,
I wanted to update the sysdig package for openSUSE. I managed to get all the dependencies built (valijson was new between 0.26.x and the current release).
However the build fails wi…
-
👋 trying to build the latest release, but run into some build issue. The error log is as below:
error build log
```
[ 76%] Building CXX object userspace/sysdig/CMakeFiles/csysdig.dir/csys…
-
**Motivation**
Proposing to add subtle extensions to Falco's rules expression language in order to make event filtering even more powerful and more convenient to use while not sacrificing performan…
-
In the falco alerts "Unexpected setuid call by non-sudo events contain no details" is comming all
00:40:51.862247143: Notice Unexpected setuid call by non-sudo, non-root program (contain…
-
While troubleshooting vanilla Falco and previous memory related issues it
proved to be useful to have an understanding how the thread cache is growing.
To make it more visible, expose the current thre…
-
I downloaded the source code package of sysdig version [0.34.1](https://github.com/draios/sysdig/archive/refs/tags/0.34.1.zip), and I encountered an error during compilation:
```
cmake ..
-- Libs v…