-
(Content copied from https://github.com/draios/falco/issues/99)
ikoniaris commented on Aug 19 • edited
Hi @mstemm, does this really work and how can I debug it?
For example, testing the program_outp…
-
I still get this issue when trying latest ruleset event with recent sysdig update
```
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04.2 LTS
Rele…
juju4 updated
6 years ago
-
This is a carryover from a slack conversation, and was related to high cpu usage when using falco in k8s environments. Its related to other issues but has a better description and suggested fixes so I…
-
Falco binary seems to segfault every 10 - 30 minutes. No idea what is triggering this.
# gdb /usr/bin/falco core.15764
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-94.el7
Copyright (C) 2013 Free …
-
There seems to be some plausible overlap with the event system over at https://github.com/purpleidea/mgmt/
I just figured I'd give a shout out over here in case you'd be interested in collaborating…
-
It requires the `required-access-sysdig` ClusterRole to work properly. Perhaps by default the example should also contain a ServiceAccount attached to the DaemonSet and a ClusterRoleBinding to that Se…
-
When the falco engine matches an event to a rule, it returns the rule's name, priority, and output string.
Later, in the outputs module, the output string is prefixed with '*' to ensure that if an …
-
sysdig and falco installed through the project's Debian repository on existing systems running Jessie and Kubernetes 1.4
falco process consumes 2.8 GB of resident memory after running on a cluster …
-
I added the rule at the bottom of this message to the rules.yaml file. When I do a curl, I would expect the rule to be hit multiple times. However, I don't see any alert.
---
- rule: system_binaries_…
-
I'm trying to use the pre-defined rule in falco_rules.local.yaml to detect when a user runs sudo inside a container. The rule is:
```
- rule: The program "sudo" is run in a container
desc: An e…
pogao updated
6 years ago