Federico Di Pierro comments

Results 728 comments of


                                            Federico Di Pierro

falcoSchema.json should be generated by Falco itself

Implemented in https://github.com/falcosecurity/falco/pull/3313.

refactor: Use string_view in event filters and more

Since we are a bit late for the 0.16.0 tag, i propose: /milestone 0.17.0

[BUG]: file related `dev` field extraction is dependent on the Filesystem type

/milestone TBD

modern-bpf fails to load on RHEL 8.6 ppc64le (unsupported opcode)

Thanks for tracking this one! /milestone next-driver

modern-bpf fails to load on RHEL 8.6 ppc64le (unsupported opcode)

Thanks for the investigation Giles! We already document a minimum kernel version of 5.8 for modern bpf probe: https://github.com/falcosecurity/libs?tab=readme-ov-file#drivers-officially-supported-architectures Even if it **CAN** theoretically work on older versions since, as...

modern-bpf fails to load on RHEL 8.6 ppc64le (unsupported opcode)

/close

update(libsinsp): increase async event queue size

/milestone 0.17.0

[WIP] feat(tests): new e2e tests [7/N]

/milestone 0.17.0

[WIP] feat(tests): new e2e tests [7/N]

x86_64 matrix: | KERNEL | CMAKE-CONFIGURE | KMOD BUILD | KMOD SCAP-OPEN | BPF-PROBE BUILD | BPF-PROBE SCAP-OPEN | MODERN-BPF SCAP-OPEN | |----------------------|-----------------|------------|----------------|--------------------------------------------|------------------------------------------------|-------------------------------------------------| | amazonlinux2-4.19 | 🟢 | 🟢 |...

[WIP] feat(tests): new e2e tests [7/N]

X86_64: | KERNEL | CMAKE-CONFIGURE | KMOD BUILD | KMOD SCAP-OPEN | BPF-PROBE BUILD | BPF-PROBE SCAP-OPEN | MODERN-BPF SCAP-OPEN | |----------------------|-----------------|------------|----------------|----------------------------------------|---------------------------------------------|----------------------------------------------| | amazonlinux2-4.19 | 🟢 | 🟢 | 🟢...