Andrea Terzolo comments

Results 570 comments of


                                            Andrea Terzolo

docs(ringbuffer): add some documentation around perf buffer logic

/hold

docs(ringbuffer): add some documentation around perf buffer logic

/milestone 0.10.0

docs(ringbuffer): add some documentation around perf buffer logic

/unhold

[FEATURE] Options available for tapping into "linux_binprm" that holds args used when loading binaries

My 2 cents on this. Even if we are able to recover the `struct linux_binprm` from `sys_exit` it would be really a mess and really expensive while with `sched/sched_process_exec` we...

[FEATURE] Options available for tapping into "linux_binprm" that holds args used when loading binaries

Just thinking again about it... since we have the collision with this tracepoint already used in ARM, what about using a `kprobe`? Ok, kernel functions could change over time but...

[FEATURE] Options available for tapping into "linux_binprm" that holds args used when loading binaries

> To be honest, here I would vote for the second choice because this would open a new world for Falco! We could trace almost whatever we want not only...

[FEATURE] Options available for tapping into "linux_binprm" that holds args used when loading binaries

> Would favor staying open minded and explore all options. Furthermore, shall we follow a data-driven approach? Meaning we measure perf overhead on actual production servers instead of making decisions...

new(driver,userspace): automatically generate syscall_info_table entries at startup time

/hold

update(scap-open): count the number of timeouts if buffers are empty

/unhold

Run e2e tests on CI

Now they work over #643 :point_down: https://github.com/Andreagit97/libs/tree/try_e2e. There is a problem in the building with `minimal_deps` but I think it is related to the fact that in `minimal_deps` we don't...