Andrea Terzolo

[WIP] Adopt specific-engine open methods (new `libsinsp` APIs)

1

**What type of PR is this?** /kind cleanup /kind feature **Any specific area of the project related to this PR?** /area build /area engine **What this PR does / why...

[UMBRELLA] Missing syscalls

18

**Motivation** I think we need an issue to track all the missing syscalls that can have a security value for `Falco`. I detected these ones right now: - [x] `fsconfig`...

new(modern_bpf): add support for some `network` family syscalls

5

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area driver-modern-bpf /area libpman /area tests **Does this PR require a change...

fix(libsinsp): retrieve the correct `exepath` with `execveat` syscall

1

**What type of PR is this?** /kind bug /kind cleanup **Any specific area of the project related to this PR?** /area libsinsp /area tests **Does this PR require a change...

update(libsinsp/drivers): send empty params from drivers and manage them in userspace

1

**What type of PR is this?** /kind cleanup /kind feature **Any specific area of the project related to this PR?** /area driver-kmod /area driver-bpf /area libscap /area libsinsp /area tests...

new(modern_bpf): add support for `bpf`, `flock`, `ioctl`, `quotactl`, `unshare`, `mount`, `umount2`

1

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area driver-modern-bpf /area libpman /area tests **Does this PR require a change...

new(modern_bpf): add support for `link` family syscalls

2

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area driver-modern-bpf /area libpman /area tests **Does this PR require a change...

[Tracking] Params inconsistencies in our drivers

23

## PLEASE NOTE **This issue is mainly for tracking purposes, some points cannot be addressed until we solve the scap-file compatibility issue** -> https://github.com/falcosecurity/libs/pull/1381#issuecomment-1746613905 ## Generic context The aim of...

[WIP] update(libsinsp)!: merge all the opening methods into just one

7

**What type of PR is this?** /kind cleanup /kind design /kind feature **Any specific area of the project related to this PR?** /area libscap-engine-bpf /area libscap-engine-gvisor /area libscap-engine-kmod /area libscap-engine-modern-bpf...

**Motivation** I leave here the minimal set of syscall that I consider essential to have a first implementation of the modern bpf probe working in `simple consumer` mode. I have...