Bot releases are hidden (Show)
Published by leogr over 2 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.31.1 |
docker pull public.ecr.aws/falcosecurity/falco:0.31.1 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.31.1 |
docker pull docker.io/falcosecurity/falco-no-driver:0.31.1 |
n_drops_scratch_map
[#1916] - @Andreagit97
npm
added [#1866] - @rileydakota
npm
usage [#1866] - @rileydakota
falco-driver-loader
help message [#1899] - @leogr
PROBE
with DRIVER
where necessary. [#1887] - @FedeDP
Merged PRs | Number |
---|---|
Not user-facing | 11 |
Release note | 13 |
Total | 24 |
Published by jasondellaluce over 2 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.31.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.31.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.31.0 |
docker pull docker.io/falcosecurity/falco-no-driver:0.31.0 |
FALCOSECURITY_LIBS_SOURCE_DIR
in cmake [#1791] - @jasondellaluce
-static
suffix [#1873] - @LucaGuerra
.tar.gz
) [#1853] - @LucaGuerra
--clean
[#1795] - @jasondellaluce
.zst
and .gz
compression formats [#1863] - @leogr
execveat
[#1868] - @Andreagit97
stratum2+tcp
and stratum+ssl
protocols detection [#1810] - @sberkovich
apt-config
[#1860] - @Andreagit97
token_bucket
unit tests [#1798] - @jasondellaluce
Merged PRs | Number |
---|---|
Not user-facing | 23 |
Release note | 40 |
Total | 63 |
Published by leogr about 3 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.30.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.30.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.30.0 |
docker pull docker.io/falcosecurity/falco-no-driver:0.30.0 |
--k8s-node
command-line options, which allows filtering by a node when requesting metadata of pods to the K8s API server [#1671] - @leogr
gcc
versions in the falco-driver-loader
script [#1716] - @Spartan-65
ncurses
dependency [#1658] - @leogr
debian:buster
[#1719] - @michalschott
Merged PRs | Number |
---|---|
Not user-facing | 10 |
Release note | 9 |
Total | 19 |
Published by leodido over 3 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.29.1 |
docker pull public.ecr.aws/falcosecurity/falco:0.29.1 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.29.1 |
docker pull docker.io/falcosecurity/falco-no-driver:0.29.1 |
Merged PRs | Number |
---|---|
Not user-facing | 2 |
Release note | 1 |
Total | 3 |
Published by leogr over 3 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.29.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.29.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.29.0 |
docker pull docker.io/falcosecurity/falco-no-driver:0.29.0 |
Merged PRs | Number |
---|---|
Not user-facing | 11 |
Release note | 7 |
Total | 18 |
Release Manager @maxgio92
Published by leogr over 3 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.28.1 |
docker pull public.ecr.aws/falcosecurity/falco:0.28.1 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.28.1 |
docker pull docker.io/falcosecurity/falco-no-driver:0.28.1 |
--support
output now includes info about the Falco engine version [#1581] - @mstemm
syscall_event_timeouts.max_consecutive
to configure after how many consecutive timeouts without an event Falco must alert [#1622] - @leodido
falco_privileged_images
): remove deprecated Falco's OCI image repositories [#1634] - @maxgio92
falco_sensitive_mount_images
): remove deprecated Falco's OCI image repositories [#1634] - @maxgio92
k8s_containers
): remove deprecated Falco's OCI image repositories [#1634] - @maxgio92
Merged PRs | Number |
---|---|
Not user-facing | 7 |
Release note | 7 |
Total | 14 |
Release Manager @cpanato
Published by leodido over 3 years ago
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.28.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.28.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.28.0 |
docker pull docker.io/falcosecurity/falco-no-driver:0.28.0 |
syscall_event_drops.threshold
to tune the drop noisiness [#1586] - @leodido
syscall_event_drops.max_burst
default value to 1 [#1586] - @leodido
syscall_event_drops
config) [#1586] - @leodido
eks:node-manager
[#1536] - @ismailyenigul
Merged PRs | Number |
---|---|
Not user-facing | 17 |
Release note | 24 |
Total | 41 |
Published by fntlnz almost 4 years ago
Released on 2021-01-18
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.27.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.27.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.27.0 |
docker pull docker.io/falcosecurity/falco-no-driver:0.27.0 |
output_timeout
config option for slow outputs detection [#1451] - @leogr
spawned_process
macro inside container_started
macro [#1449] - @leodido
HOST_ROOT=/host
environment variable for the falcosecurity/falco-no-driver
container image by default [#1492] - @leogr
insmod
from a container (typically used by rootkits looking to obfuscate their behavior via kernel hooking). [#1478] - @d1vious
Merged PRs | Number |
---|---|
Not user-facing | 10 |
Release note | 30 |
Total | 40 |
Published by leodido almost 4 years ago
Released on 2020-10-01
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.26.2 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.26.2 |
docker pull docker.io/falcosecurity/falco-no-driver:0.26.2 |
Published by leodido about 4 years ago
Released on 2020-10-01
Packages | Download |
---|---|
rpm | |
deb | |
tgz |
Images |
---|
docker pull docker.io/falcosecurity/falco:0.26.1 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.26.1 |
docker pull docker.io/falcosecurity/falco-no-driver:0.26.1 |
Merged PRs | Number |
---|---|
Not user-facing | 4 |
Release note | 2 |
Total | 6 |
Published by krisnova about 4 years ago
Released on 2020-24-09
Official Stable Download 0.26.0 | |
---|---|
rpm | |
deb | |
binary |
This file documents all notable changes to Falco. The release numbering uses semantic versioning.
Merged PRs | Number |
---|---|
Not user-facing | 5 |
Release note | 13 |
Total | 18 |
Published by fntlnz about 4 years ago
Released on 2020-08-25
sysdig/node-image-analyzer
and sysdig/agent-slim
[#1321] - @Kaizhe
docker.io/falcosecurity/falco
[#1326] - @nvanheuverzwijn
renameat2
syscall [#1359] - @leogr
Merged PRs | Number |
---|---|
Not user-facing | 5 |
Release note | 15 |
Total | 20 |
Published by leodido over 4 years ago
Released on 2020-16-07
falco.outputs.service/get
[#1241]falco.outputs.service/sub
) [#1241]SKIP_MODULE_LOAD
renamed to SKIP_DRIVER_LOADER
[#1297]webserver.k8s_audit_endpoint
default value changed from /k8s_audit
to /k8s-audit
[#1261]buffered_output: false
which was not honored for the stdout
output [#1296]protokube
, dockerd
, tini
and aws
binaries to change thread namespace. [#1222]/var/run/docker
. [#1222]/root
dir and not other with just /root
as a prefix [#1279]bin_dir_mkdir
to catch mkdirat
syscall [#1250]bin_dir_rename
to catch rename
, renameat
, and unlinkat
syscalls [#1250]openat
syscall [#1250]Merged PRs | Number |
---|---|
Not user-facing | 9 |
Release note | 29 |
Total | 38 |
Published by leogr over 4 years ago
Released on 2020-18-05
falco-probe.o
and falco-probe.ko
as falco.o
and falco.ko
[#1158]falco-driver-loader
script environment variable to use a custom repository to download drivers now uses the DRIVERS_REPO
environment variable instead of DRIVER_LOOKUP_URL
. This variable must contain the parent URI containing the following directory structure /$driver_version$/falco_$target$_$kernelrelease$_$kernelversion$.[ko|o]
. e.g: [#1160]falco-driver-loader
[#1200]falco-driver-loader
with the toolchain [#1192]falcosecurity/falco-no-driver
image [#1205]falco-driver-loader
output messages [#1200]falcosecurity/falco:slim-*
alias to falcosecurity/falco-no-driver:*
[#1205]/examples
to contrib
repo [#1191]minimal
image [#1196]/integrations
to contrib
repo [#1157]Merged PRs | Number |
---|---|
Not user-facing | 17 |
Release note | 18 |
Total | 35 |
Published by leogr over 4 years ago
Released on 2020-16-04
--disable-cri-async
[#1099]README.md
[#1098]/usr/bin/falco-${DRIVER_VERSION}
driver directory [#1111]Merged PRs | Number |
---|---|
Not user-facing | 4 |
Release note | 17 |
Total | 21 |
Published by leodido over 4 years ago
Released on 2020-03-17
stable
and local
images to run from debian:stable
[#1018]latest
. [#1091]+
[#1059]Merged PRs | Number |
---|---|
Not user-facing | 7 |
Release note | 12 |
Total | 19 |
Published by fntlnz over 4 years ago
Released on 2020-02-24
Merged PRs | Number |
---|---|
Not user-facing | 5 |
Release note | 4 |
Total | 9 |
Published by leodido over 4 years ago
Released on 2020-01-23
error handling inspector event
[#746]kube-system
namespace to avoid false positives [#962]kube-system
namespace to avoid false positives [#955]Merged PRs | Number |
---|---|
Not user-facing | 12 |
Release note | 32 |
Total | 44 |
Published by fntlnz almost 5 years ago
Released 2019-10-31
syscall
event source or k8s_audit
event source [#779]calico_node_write_envvars
to exception list of write below etc [#902]kops
. [#898]