falcosecurity/libs

Issues

• Potential problems with strict-aliasing violations (libsinsp/fdinfo.cpp)

  #1964 opened 6 months ago by hhoffstaette
  2

• Add inum (mount namespace id) for clone, unshare, mount, umount, umount2, open, openat, openat2

  #1919 opened 7 months ago by albe19029
  7

• Skip events for process and thread with PID in kernel

  #1947 opened 6 months ago by albe19029
  11

• Cannot use pkg-config to build a binary with libs

  #2004 opened 3 months ago by gnosek
  0

• LIST fields type not specifically marked in markdown and documentation

  #2092 opened 3 months ago by darryk10
  0

• RSS_STAT_ARRAY compilation failure

  #2086 opened 3 months ago by albe19029
  11

• proc.vpgid* fields behaving differently in host and container

  #2076 opened 4 months ago by Andreagit97
  0

• New transformer: `getopt(<args>, <optstring>)`

  #1928 opened 7 months ago by leogr
  3

• [BUG] libsinsp-example crash on arm64 + modern_bpf

  #2061 opened 4 months ago by therealbobo
  1

• Kubernetes pod labels are sometimes missing

  #1775 opened 9 months ago by Namnamseo
  5

• Semantic of `container.id` and `container.name`

  #2057 opened 4 months ago by leogr
  1

• Tons of build issues with missing field initializers

  #2052 opened 4 months ago by gnosek
  1

• [tracking] Improve code documentation

  #1747 opened 10 months ago by sgaist
  6

• Report coverage for tests

  #1784 opened 4 months ago by LucaGuerra
  3

• Fix fd filtercheck fallback in case of `openat*` events involving `dirfd` parsing

  #2039 opened 4 months ago by incertum
  4

• Building on musl fails to link against libanl when not using static linking (aka MUSL_OPTIMIZED_BUILD)

  #1948 opened 4 months ago by hhoffstaette
  6

• Move detailed per CPU kernel stats under a new flag `METRICS_V2_KERNEL_COUNTERS_PER_CPU`

  #2028 opened 4 months ago by incertum
  6

• Follow up libs fix for `evt.arg.cmd`

  #2044 opened 4 months ago by incertum
  1

• Failure to start with --modern-bpf: quotactl_x fails to load when CONFIG_{XFS_QUOTA,QUOTACTL} are disabled

  #2033 opened 4 months ago by hhoffstaette
  13

• [-DBUILD_SHARED_LIBS=ON] "error: driver/syscall_compat_x86_64.h: No such file or directory" at build time

  #1820 opened 8 months ago by Apteryks
  7

• `PPME_SYSCALL_CREAT_X` is missing in `fs.path.*` filtercheck logic

  #2040 opened 4 months ago by incertum
  0

• libsinsp.pc references build tree instead of install prefix

  #1825 opened 8 months ago by Apteryks
  4

• [BUG] Broken plugins metrics support

  #1888 opened 4 months ago by mrgian
  2

• New transformer: `join(<list>, <sep>)`

  #1925 opened 7 months ago by leogr
  2

• Add system call event field for fd.rip_rport and fd.sip_sport

  #1981 opened 5 months ago by an1245
  15

• Add public `is_cri_async` and a `get_cri_socket_paths` methods to CRI container engine

  #2022 opened 4 months ago by incertum
  4

• New transformer: `concat(<item1>, <item2>, ...)`

  #2025 opened 4 months ago by leogr
  0

• Add Fortify strings check to CI

  #1882 opened 7 months ago by LucaGuerra
  2

• Regression in `proc.aname` list comparison in libs > 0.17.x

  #2018 opened 4 months ago by LucaGuerra
  2

• Compilation failure in libsinsp/filter/ast.cpp with gcc-15: uint32_t does not name a type

  #2012 opened 5 months ago by hhoffstaette
  2

• [LIBS PLUGINS] Expose some core libs functionality to the syscalls plugin API

  #2008 opened 5 months ago by incertum
  1

• [LIBS PLUGINS] Accessors to libs state tables fields - 2

  #1944 opened 6 months ago by incertum
  2

• [LIBS PLUGINS] Make each and every libs filtercheck result accessible to syscalls plugins

  #2007 opened 5 months ago by incertum
  1

• [FEATURE/BUG] Bpf module test failed on loongarch

  #1850 opened 8 months ago by yzewei
  7

• compilation error on RHEL >= 9.4

  #1898 opened 5 months ago by andrei-danschikov
  5

• Add support for flags in fcntl, socket, socketpair, accept4

  #2003 opened 5 months ago by albe19029
  2

• scap_platform_init and scap_open api leads to memory corruptions

  #1955 opened 6 months ago by albe19029
  4

• Failure to link with LTO: undefined reference to `libsinsp::cri::cri_interface<libsinsp::cri::cri_api_v1alpha2>::get_cri_runtime_type()

  #1963 opened 5 months ago by hhoffstaette
  7

• [BUG]: file related `dev` field extraction is dependent on the Filesystem type

  #1805 opened 9 months ago by FedeDP
  3

• [TRACKING] Parse more syscalls args, e.g. `fallocate`, `ftruncate`, `fsopen`, `fsmount`, `kexec_load` etc

  #1951 opened 6 months ago by incertum
  3

• New transformer: `basename()`

  #1927 opened 6 months ago by leogr
  3

• Extend `fd.types` to be used with any system call

  #1894 opened 7 months ago by loresuso
  6

• Serious eBPF driver regression starting with 0.16.x libs

  #1890 opened 7 months ago by incertum
  10

• [Feature] Supporting field transformers in filtering language

  #1789 opened 7 months ago by jasondellaluce
  9

• modern-bpf fails to load on RHEL 8.6 ppc64le (unsupported opcode)

  #1807 opened 8 months ago by Stringy
  5

• Cache Kernel sources for e2e tests

  #1848 opened 8 months ago by alexellis
  7

• modern-bpf probe loading fails on ppc64le RHEL 8.6

  #1804 opened 9 months ago by mdafsanhossain
  13

• [Proposal] Chisels removal from libs

  #1743 opened 9 months ago by leogr
  6

• CI asan jobs failures

  #1750 opened 10 months ago by FedeDP
  4

• Trying to compile `libinsp` on Alpine 3.19 results in error: 'int64_t' has not been declared

  #1741 opened 10 months ago by Quarky9
  3