A.z fan

Results 8 comments of A.z fan

Will update in next version. Previewe in branch "v1.9"

> > gcc版本问题,建议安装并使用内核编译时的gcc版本,可通过cat /proc/version查看 > > ![img_v3_025u_ea4e5382-1f5f-4b8d-a75c-a8d0f93ef3eh](https://private-user-images.githubusercontent.com/45646047/289026877-f1f05be5-af74-4764-a8d3-b990732e2b94.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.SDGWsZVb8OYIQL4F_3jTyZT9NlEFS2mtHB-YWpPRXfc) 目前使用的tencentos/tencentos_server24:latest镜像 有了 /proc/version ,检查下 编译使用 的 gcc -v 是否与其 一致呢

please show more context information, and try #488

场景不同 并未进入 main 分支,2.2.0.1/scanner 分支 已添加 https://github.com/bytedance/Elkeid/blob/2.2.0.1/scanner/plugins/scanner/src/model/engine/clamav/mod.rs#L55 对应 commit : Sep 11, 2023 https://github.com/bytedance/Elkeid/commit/863099db541ff7be99034586646764545c394d20#diff-6e03e9e9bc330818df2128e89b380d888b018574337a804cd332b039c4e4205a

1.```hids_driver_4.18.0-477.13.1.el8_8.x86_64.ko``` missing **```1.7.0.10```**, It should be ```hids_driver_1.7.0.10_4.18.0-477.13.1.el8_8.x86_64.ko``` and ```hids_driver_1.7.0.10_4.18.0-477.13.1.el8_8.x86_64.sign``` 2.SElinux blocked the tcp connection, and it should be fixed if you set selinux into **disabled**

build readme 未更新问题 * x64 编译正常 * arm64 交叉编译报错,编译链问题,arm64 需要 单独配置GCC,并指定 CC=aarch64-linux-musl-gcc 建议 先区分 架构环境 单独编译,如果 只需要 x64 的 先 注释掉 arm64 部分

This issue also happens to me, in the docker , this rules stuck for 15mins. But on the host, it works in 3 seconds. [This rule](https://github.com/DataDog/guarddog/blob/main/guarddog/analyzer/sourcecode/shady-links.yml) ```yaml # TODO: Detects...