falcosecurity/libs
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
CApache-2.0
Issues
- 9
Failure to start with --modern-bpf: quotactl_x fails to load when CONFIG_{XFS_QUOTA,QUOTACTL} are disabled
#2033 opened by hhoffstaette - 6
Move detailed per CPU kernel stats under a new flag `METRICS_V2_KERNEL_COUNTERS_PER_CPU`
#2028 opened by incertum - 5
Building on musl fails to link against libanl when not using static linking (aka MUSL_OPTIMIZED_BUILD)
#1948 opened by hhoffstaette - 2
[BUG] Broken plugins metrics support
#1888 opened by mrgian - 2
New transformer: `join(<list>, <sep>)`
#1925 opened by leogr - 15
- 7
[TRACKING] Improve container engine state handling
#1708 opened by incertum - 4
Add public `is_cri_async` and a `get_cri_socket_paths` methods to CRI container engine
#2022 opened by incertum - 0
New transformer: `concat(<item1>, <item2>, ...)`
#2025 opened by leogr - 2
Add Fortify strings check to CI
#1882 opened by LucaGuerra - 2
- 2
Compilation failure in libsinsp/filter/ast.cpp with gcc-15: uint32_t does not name a type
#2012 opened by hhoffstaette - 37
[BUG] Compile modern_bpf error
#1719 opened by yzewei - 6
[LIBS PLUGINS] Expose libs syscalls `PPME_` events enum over a new plugin API
#1711 opened by incertum - 1
[LIBS PLUGINS] Expose some core libs functionality to the syscalls plugin API
#2008 opened by incertum - 2
[LIBS PLUGINS] Accessors to libs state tables fields - 2
#1944 opened by incertum - 1
[LIBS PLUGINS] Make each and every libs filtercheck result accessible to syscalls plugins
#2007 opened by incertum - 7
[FEATURE/BUG] Bpf module test failed on loongarch
#1850 opened by yzewei - 4
Kubernetes pod labels are sometimes missing
#1775 opened by Namnamseo - 5
compilation error on RHEL >= 9.4
#1898 opened by andrei-danschikov - 2
- 0
Cannot use pkg-config to build a binary with libs
#2004 opened by gnosek - 4
- 5
[-DBUILD_SHARED_LIBS=ON] "error: driver/syscall_compat_x86_64.h: No such file or directory" at build time
#1820 opened by Apteryks - 7
Failure to link with LTO: undefined reference to `libsinsp::cri::cri_interface<libsinsp::cri::cri_api_v1alpha2>::get_cri_runtime_type()
#1963 opened by hhoffstaette - 2
- 1
Potential problems with strict-aliasing violations (libsinsp/fdinfo.cpp)
#1964 opened by hhoffstaette - 3
[BUG]: file related `dev` field extraction is dependent on the Filesystem type
#1805 opened by FedeDP - 9
Skip events for process and thread with PID in kernel
#1947 opened by albe19029 - 3
[TRACKING] Parse more syscalls args, e.g. `fallocate`, `ftruncate`, `fsopen`, `fsmount`, `kexec_load` etc
#1951 opened by incertum - 2
Report coverage for tests
#1784 opened by LucaGuerra - 3
New transformer: `basename()`
#1927 opened by leogr - 1
New transformer: `getopt(<args>, <optstring>)`
#1928 opened by leogr - 5
Add inum (mount namespace id) for clone, unshare, mount, umount, umount2, open, openat, openat2
#1919 opened by albe19029 - 6
Extend `fd.types` to be used with any system call
#1894 opened by loresuso - 10
Serious eBPF driver regression starting with 0.16.x libs
#1890 opened by incertum - 3
[tracking] Improve code documentation
#1747 opened by sgaist - 11
fd.name some times contain bogus <UNKNOWN> part in "Write below root" event
#1892 opened by petterreinholdtsen - 9
- 5
- 9
[LIBS PLUGINS] Accessors to libs state tables fields
#1712 opened by incertum - 7
Cache Kernel sources for e2e tests
#1848 opened by alexellis - 6
- 13
modern-bpf probe loading fails on ppc64le RHEL 8.6
#1804 opened by mdafsanhossain - 5
- 6
[Proposal] Chisels removal from libs
#1743 opened by leogr - 2
Coverage build is broken for plugin tests
#1701 opened by LucaGuerra - 17
sinsp_suppress m_cache optimization is not working
#1724 opened by albe19029 - 4
CI asan jobs failures
#1750 opened by FedeDP - 3
Trying to compile `libinsp` on Alpine 3.19 results in error: 'int64_t' has not been declared
#1741 opened by Quarky9