Melissa Kilby comments

Results 466 comments of


                                            Melissa Kilby

[LIBS PLUGINS] Expose libs syscalls `PPME_` events enum over a new plugin API

/remove-lifecycle stale

[LIBS PLUGINS] Expose libs syscalls `PPME_` events enum over a new plugin API

/milestone TBD /assign @jasondellaluce

new(metrics): add host_ifinfo metric

@FedeDP @sgaist @mrgian thanks.

new(metrics): add host_ifinfo metric

/hold needs a libs bump after merging https://github.com/falcosecurity/libs/pull/1937.

new(metrics): add host_ifinfo metric

> I think you can now rebase on top of Falco master ;) Rebased, thanks.

update(cri): `cri-dockerd` support

I have the Falco PR up as well. This is ready for review, thanks.

update(cri): `cri-dockerd` support

> @incertum should we also add cri-dockerd in rules? container_entrypoint macro should be one Let's check, it may be just like regular docker (haven't checked the proc lineage) . I...

update(cri): `cri-dockerd` support

@falcosecurity/libs-maintainers any news on this PR or objections? Ty

Undetected container/k8s information leads to alert fatigue caused by k8s_containers macro

Thanks @aberezovski. The fact that `container.id` is empty is strange, since we fetch the cgroup info in the kernel and it should always be there. Also a bunch of other...

Undetected container/k8s information leads to alert fatigue caused by k8s_containers macro

> I observed that weird behavior only for alerts generated by rule Contact K8S API Server From Container and ONLY when falco is running as non-privileged container. Thanks for opening...