falcosecurity/libs

Issues

• Last stable release (0.14.3) fails to build kernel module with Linux 6.8.

  #1740 opened 9 months ago
  6

• sinsp_suppress m_cache optimization is not working

  #1724 opened 10 months ago
  17

• [BUG] Compile modern_bpf error

  #1719 opened 4 months ago
  39

• [LIBS PLUGINS] Accessors to libs state tables fields

  #1712 opened 8 months ago
  9

• [LIBS PLUGINS] Expose libs syscalls `PPME_` events enum over a new plugin API

  #1711 opened 9 days ago
  10

• fd.name some times contain bogus <UNKNOWN> part in "Write below root" event

  #1892 opened a year ago
  16

• [TRACKING] Improve container engine state handling

  #1708 opened 21 days ago
  10

• Coverage build is broken for plugin tests

  #1701 opened 10 months ago
  2

• [BUG]: Possible errors in initializing assignment structures

  #1700 opened 9 months ago
  5

• [DISCUSSION] [PLUGIN API] Notes from the Rust world

  #1672 opened 4 months ago
  10

• [TRACKING] End-to-End Test Contribution Proposal

  #1650 opened 3 months ago
  10

• sys_procexit_e has more then 1M instruction on GKE (COS)

  #1639 opened a year ago
  3

• Add args for `sendmmsg` events

  #1636 opened 10 days ago
  29

• Enhancement Request: Introduce SQL Query Support for Falco Syscall Events

  #1627 opened a year ago
  3

• Build fails when USE_BUNDLED_MODERN_BPF=OFF

  #1623 opened a year ago
  0

• Expose `thread_table_absolute_max_size` as config

  #1621 opened a year ago
  3

• [BUG]: wrong relative paths resolution in `PPME_SYSCALL_LINKAT_2_X`

  #1610 opened a year ago
  9

• [TRACKING] Libs Release (`0.14.1`)

  #1608 opened a year ago
  1

• Missing child clone call on arm64

  #1605 opened a year ago
  1

• gVisor engine crashes with non-hex container IDs

  #1602 opened a year ago
  1

• scap dkms in zen-kernel 6.6.4 + causing deadlocks

  #1594 opened a year ago
  9

• Container Engine Refactor (CRI)

  #1589 opened 21 days ago
  10

• The tracking of orphan processes is lost.

  #1577 opened a year ago
  12

• Cannot compile sysdig/libscap bpf driver in 6.6.4-zen kernel

  #1562 opened a year ago
  7

• Introduce conditional kernel-side event filtering

  #1557 opened a year ago
  29

• Improve `k8s.` fields retrieved from container runtime socket robustness + expose full container id and pod ids

  #1550 opened a year ago
  7

• Place environment variables in an array

  #1546 opened a year ago
  3

• `k8s.*` fields must be populated only if event originate from within a Kubernetes environment

  #1532 opened a year ago
  1

• [DECISION/VOTE]: Clarify acceptability of a BPF probe-centric approach for custom driver management

  #1527 opened 7 months ago
  18

• Legacy bpf probe verifier issue in `find_new_reaper_pid`

  #1521 opened a year ago
  11

• cmake error：install TARGETS given target "scap" which does not exist in this directory.

  #1513 opened a year ago
  12

• Under the arm architecture，function perf_event_mmap error happened

  #1507 opened 9 months ago
  5

• pack_addr supports parsing AF_NETLINK protocol

  #1494 opened a year ago
  11

• [TRACKING] Libs Release (`0.14.0`)

  #1482 opened a year ago
  4

• Tracking events of all descendant processes created by a target process, dealing with cases like orphan processes.

  #1476 opened 15 days ago
  15

• Support UndefinedBehaviorSanitizer in CI/test builds

  #1470 opened a year ago
  1

• [TRACKING] Technical debt cleanup wrt edge case segfaults or memleaks 🧹

  #1468 opened 5 months ago
  12

• [TRACKING] Create a more coherent stats model for libs and consumer

  #1463 opened 8 months ago
  11

• Uninitialized efd field in alloc_handle() leads to undefined behavior

  #1448 opened a year ago
  2

• [TRACKING] Patch release 0.13.2

  #1399 opened a year ago
  4

• Abandon CircleCI in favor of github actions

  #1384 opened a year ago
  11

• Allow loading tracepoints other than the ones needed by Falco

  #1376 opened 7 months ago
  25

• [PROPOSAL] Remove udig engine support

  #1368 opened a year ago
  7

• [TRACKING] Patch release 0.13.1

  #1365 opened a year ago
  0

• Add FDs to a process' FD table when transferred via SCM_RIGHTS

  #1364 opened a year ago
  4

• kernel panic error caused by a bug in the “val_to_ring” function，causing a crash of the host machine

  #1359 opened a year ago
  9

• [BUG] libscap crash with no error message

  #1358 opened a year ago
  0

• [TRACKING] Enhanced libs stats / metrics

  #1347 opened a year ago
  2

• Remove or replace `driver/ppm_syscall.h`

  #1346 opened a year ago
  1

• [Feature] Improve args in `bpf` exit event

  #1343 opened a year ago
  22