falcosecurity / libs

libsinsp, libscap, the kernel module driver, and the eBPF driver sources
https://falcosecurity.github.io/libs/
Apache License 2.0
222 stars 162 forks source link

[LIBS PLUGINS] Expose some core libs functionality to the syscalls plugin API #2008

Open incertum opened 3 weeks ago

incertum commented 3 weeks ago

This issue complements existing issues:

For instance, in https://github.com/falcosecurity/libs/issues/1711, there was a request to expose the event enum. Below are some additional functionalities that plugin developers could benefit from, as otherwise, it would require recreating tedious and error-prone libs code:

As we discuss the other issues and consider a redesign of the general plugin API and SDK layout, I’ll provide more details here later. Stay tuned.

incertum commented 3 weeks ago

/milestone TBD

/assign @jasondellaluce