albe19029

Invalid WorkingSetBytes, AvailableBytes, UsageBytes, RssBytes for RuntimeService.ListContainerStats (RuntimeService.ContainerStats)

7

### What happened? Checking implementation for containerd and cadvisor (kubelet) the calculation for WorkingSetBytes, AvailableBytes, UsageBytes, RssBytes working the same: for cgroups V1: UsageBytes = memory.usage_in_bytes RssBytes = memory.stat (total_rss)...

Trash in images

4

While checking for content of sysdig images I found files, which seams like a trash. -rw-r--r-- 1 root root 204K Jul 15 2023 libomptarget-amdgpu-gfx1030.bc -rw-r--r-- 1 root root 204K Jul...

Add inum (mount namespace id) for clone, unshare, mount, umount, umount2, open, openat, openat2

7

Good day. In our application that use your driver sometimes we need additional information from mountinfo file. We need information both for host and containers. What we want is to...

Skip events for process and thread with PID in kernel

21

When using scap library is is not possible to skip events for process, who started monitoring. There are a logic with suppressor, but it is too complicated, as if for...

Add support for flags in fcntl, socket, socketpair, accept4

2

For monitoring process files it is good to know CLOEXEC flag. But for now only part of method support it (inotify_init1, eventfd2, signalfd4, dup3, pipe2, open, openat, open_by_handle_at, pidfd_open,epoll_create1, memfd_create)...

scap_platform_init and scap_open api leads to memory corruptions

4

We have faced memory corruption while switching form version 6.0.1+driver to 7.0.0+driver. The reason is not very clear API for new scap_platform_init method. Before this update there was only one...

fix dpkg symlink license problem for image scan

15

This commit fix empty licensed for packages with symlinks to copyright to other packages. To work correct next code also must be added to nested.Nested: [nested.txt](https://github.com/user-attachments/files/18925738/nested.txt)