Michal Stanek
Michal Stanek
New events added: EBPF_EVENT_FILE_MEMFD_OPEN EBPF_EVENT_FILE_SHMEM_OPEN EBPF_EVENT_PROCESS_MEMFD_CREATE EBPF_EVENT_PROCESS_SHMGET EBPF_EVENT_PROCESS_PTRACE EBPF_EVENT_PROCESS_LOAD_MODULE Also added new fields to process exec event
Add Go tests for all probes except `load_kernel_module` (this one will come in the next PR). Test for `shm_open` was not integrated because of complicated dependencies (libraries) of that glibc...
aarch64 CI build times out likely because of EPEL
Changes required to use skeleton headers for host isolation. It is still possible to use `*bpf.o` files and the Host Isolation demos continue to use those.
We ran into an issue where a function prototype was changed in kernel 6.10, but our kernel tester didn't detect it in CI because we never updated the list of...
This option makes no sense because it spams tty events in an infinite feedback loop.
## Proposed commit message packetbeat: fix bounds checking in mongodb protocol parser ## Checklist - [x] My code follows the style guidelines of this project - [x] I have commented...