Federico Di Pierro comments

Results 1254 comments of


                                            Federico Di Pierro

new(config): add `container_engines` config to falco.yaml

> The test should not be dependent on the order? Yes but the test enforces that the very first log line should be `Falco version...`, and that makes sense from...

new(config): add `container_engines` config to falco.yaml

We need to fix #3270 in order to fix CI, since centos7 is eol.

new(config): add `container_engines` config to falco.yaml

Hey Melissa, we were finally able to bump libs in Falco master, can you rebase this one? :)

Follow up libs fix for `evt.arg.cmd`

/remove-lifecycle stale

Follow up libs fix for `evt.arg.cmd`

/remove-lifecycle stale

Follow up libs fix for `evt.arg.cmd`

/remove-lifecycle stale

[Tracking] localhost `test/vm` test suite - occasionally capture results tables

I fully agree, we should definitely spend some time to fix those issues; perhaps not all issues will suddenly go away by splitting `bpf_val_to_ring`, but experience says that like 90%...

[Tracking] localhost `test/vm` test suite - occasionally capture results tables

> Was thinking if we couldn't just run it as is on the CNCF test server as ad-hoc on demand CI pipeline (non required)? While the vagrant and vbox approach...

Falco doesn't recognise async evt types when checking rules

Hi! Thanks for opening this issue. Trackign down to libs, i spotted this comment by Jason: https://github.com/falcosecurity/libs/blob/master/userspace/libsinsp/filter/ppm_codes.cpp#L244 ``` // todo(jasondellaluce): should we deal with PPME_ASYNCEVENT_E at this level? libsinsp::events::set libsinsp::filter::ast::ppm_event_codes(...

Falco doesn't recognise async evt types when checking rules

Problem is that `names_to_event_set` only sees `event_table` events, not the ones "injected" by plugins async event capability. Also, i am not even sure if at the time we are doing...