-
Notifications
You must be signed in to change notification settings - Fork 920
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
53 changed files
with
1,464 additions
and
205 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,7 @@ | ||
| /build* | ||
| *~ | ||
| test/falco_test.pyc | ||
| *.pyc | ||
|
|
||
| test/falco_tests.yaml | ||
| test/traces-negative | ||
| test/traces-positive | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -7,7 +7,7 @@ if(NOT DEFINED FALCO_VERSION) | |
| endif() | ||
|
|
||
| if(NOT DEFINED FALCO_ETC_DIR) | ||
| set(FALCO_ETC_DIR "/etc") | ||
| set(FALCO_ETC_DIR "/etc/falco") | ||
| endif() | ||
|
|
||
| if(NOT CMAKE_BUILD_TYPE) | ||
|
|
@@ -43,7 +43,9 @@ set(PACKAGE_NAME "falco") | |
| set(PROBE_VERSION "${FALCO_VERSION}") | ||
| set(PROBE_NAME "falco-probe") | ||
| set(PROBE_DEVICE_NAME "falco") | ||
| set(CMAKE_INSTALL_PREFIX /usr) | ||
| if (CMAKE_INSTALL_PREFIX_INITIALIZED_TO_DEFAULT) | ||
| set(CMAKE_INSTALL_PREFIX /usr CACHE PATH "Default install path" FORCE) | ||
| endif() | ||
|
|
||
| set(CMD_MAKE make) | ||
|
|
||
|
|
@@ -301,6 +303,7 @@ if(NOT USE_BUNDLED_LPEG) | |
| else() | ||
| set(LPEG_SRC "${PROJECT_BINARY_DIR}/lpeg-prefix/src/lpeg") | ||
| set(LPEG_LIB "${PROJECT_BINARY_DIR}/lpeg-prefix/src/lpeg/build/lpeg.a") | ||
| message(STATUS "Using bundled lpeg in '${LPEG_SRC}'") | ||
| set(LPEG_DEPENDENCIES "") | ||
| if(USE_BUNDLED_LUAJIT) | ||
| list(APPEND LPEG_DEPENDENCIES "luajit") | ||
|
|
@@ -340,6 +343,7 @@ else() | |
|
|
||
| set(LIBYAML_SRC "${PROJECT_BINARY_DIR}/libyaml-prefix/src/libyaml/src") | ||
| set(LIBYAML_LIB "${LIBYAML_SRC}/.libs/libyaml.a") | ||
| message(STATUS "Using bundled libyaml in '${LIBYAML_SRC}'") | ||
| ExternalProject_Add(libyaml | ||
| URL "http://download.draios.com/dependencies/libyaml-0.1.4.tar.gz" | ||
| URL_MD5 "4a4bced818da0b9ae7fc8ebc690792a7" | ||
|
|
@@ -367,6 +371,7 @@ if(NOT USE_BUNDLED_LYAML) | |
| else() | ||
| set(LYAML_SRC "${PROJECT_BINARY_DIR}/lyaml-prefix/src/lyaml/ext/yaml") | ||
| set(LYAML_LIB "${LYAML_SRC}/.libs/yaml.a") | ||
| message(STATUS "Using bundled lyaml in '${LYAML_SRC}'") | ||
| set(LYAML_DEPENDENCIES "") | ||
| if(USE_BUNDLED_LUAJIT) | ||
| list(APPEND LYAML_DEPENDENCIES "luajit") | ||
|
|
@@ -393,9 +398,11 @@ endif() | |
| add_subdirectory("${SYSDIG_DIR}/userspace/libscap" "${PROJECT_BINARY_DIR}/userspace/libscap") | ||
| add_subdirectory("${SYSDIG_DIR}/userspace/libsinsp" "${PROJECT_BINARY_DIR}/userspace/libsinsp") | ||
|
|
||
| add_subdirectory(scripts) | ||
| set(FALCO_SINSP_LIBRARY sinsp) | ||
| set(FALCO_SHARE_DIR ${CMAKE_INSTALL_PREFIX}/share/falco) | ||
| set(FALCO_SHARE_DIR share/falco) | ||
| set(FALCO_ABSOLUTE_SHARE_DIR "${CMAKE_INSTALL_PREFIX}/${FALCO_SHARE_DIR}") | ||
| set(FALCO_BIN_DIR bin) | ||
| add_subdirectory(scripts) | ||
| add_subdirectory(userspace/engine) | ||
| add_subdirectory(userspace/falco) | ||
|
|
||
|
|
@@ -416,7 +423,7 @@ set(CPACK_DEBIAN_PACKAGE_MAINTAINER "Sysdig <[email protected]>") | |
| set(CPACK_DEBIAN_PACKAGE_SECTION "utils") | ||
| set(CPACK_DEBIAN_PACKAGE_HOMEPAGE "http://www.sysdig.org") | ||
| set(CPACK_DEBIAN_PACKAGE_DEPENDS "dkms (>= 2.1.0.0)") | ||
| set(CPACK_DEBIAN_PACKAGE_CONTROL_EXTRA "${CMAKE_BINARY_DIR}/scripts/debian/postinst;${CMAKE_BINARY_DIR}/scripts/debian/prerm;${PROJECT_SOURCE_DIR}/scripts/debian/postrm") | ||
| set(CPACK_DEBIAN_PACKAGE_CONTROL_EXTRA "${CMAKE_BINARY_DIR}/scripts/debian/postinst;${CMAKE_BINARY_DIR}/scripts/debian/prerm;${PROJECT_SOURCE_DIR}/scripts/debian/postrm;${PROJECT_SOURCE_DIR}/cpack/debian/conffiles") | ||
|
|
||
| set(CPACK_RPM_PACKAGE_LICENSE "GPLv2") | ||
| set(CPACK_RPM_PACKAGE_URL "http://www.sysdig.org") | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,7 +2,7 @@ | |
|
|
||
| #### Latest release | ||
|
|
||
| **v0.7.0** | ||
| **v0.8.0** | ||
| Read the [change log](https://github.com/draios/falco/blob/dev/CHANGELOG.md) | ||
|
|
||
| Dev Branch: [](https://travis-ci.org/draios/falco)<br /> | ||
|
|
@@ -36,7 +36,7 @@ Join the Community | |
| * Contact the [official mailing list](https://groups.google.com/forum/#!forum/falco) for support and to talk with other users. | ||
| * Follow us on [Twitter](https://twitter.com/sysdig) for general falco and sysdig news. | ||
| * This is our [blog](https://sysdig.com/blog/), where you can find the latest [falco](https://sysdig.com/blog/tag/falco/) posts. | ||
| * Join our [Public Slack](https://sysdig.slack.com) channel for sysdig and falco announcements and discussions. | ||
| * Join our [Public Slack](https://slack.sysdig.com) channel for sysdig and falco announcements and discussions. | ||
|
|
||
| License Terms | ||
| --- | ||
|
|
@@ -61,15 +61,27 @@ As always, we are grateful for your past and present contributions to falco. | |
|
|
||
| **Individual contributions**: Individuals who wish to make contributions must review the [Individual Contributor License Agreement](./cla/falco_contributor_agreement.txt) and indicate agreement by adding the following line to every GIT commit message: | ||
|
|
||
| ``` | ||
| falco-CLA-1.0-signed-off-by: Joe Smith <[email protected]> | ||
| ``` | ||
|
|
||
| Use your real name; pseudonyms or anonymous contributions are not allowed. | ||
|
|
||
| **Corporate contributions**: Employees of corporations, members of LLCs or LLPs, or others acting on behalf of a contributing entity, must review the [Corporate Contributor License Agreement](./cla/falco_corp_contributor_agreement.txt), must be an authorized representative of the contributing entity, and indicate agreement to it on behalf of the contributing entity by adding the following lines to every GIT commit message: | ||
|
|
||
| ``` | ||
| falco-CLA-1.0-contributing-entity: Full Legal Name of Entity | ||
| falco-CLA-1.0-signed-off-by: Joe Smith <[email protected]> | ||
| falco-CLA-1.0-contributing-entity: Full Legal Name of Entity | ||
| falco-CLA-1.0-signed-off-by: Joe Smith <[email protected]> | ||
| ``` | ||
|
|
||
| Use a real name of a natural person who is an authorized representative of the contributing entity; pseudonyms or anonymous contributions are not allowed. | ||
|
|
||
| **Government contributions**: Employees or officers of the United States Government, must review the [Government Contributor License Agreement](https://github.com/draios/falco/blob/dev/cla/falco_govt_contributor_agreement.txt), must be an authorized representative of the contributing entity, and indicate agreement to it on behalf of the contributing entity by adding the following lines to every GIT commit message: | ||
|
|
||
| ``` | ||
| falco-CLA-1.0-contributing-govt-entity: Full Legal Name of Entity | ||
| falco-CLA-1.0-signed-off-by: Joe Smith <[email protected]> | ||
| This file is a work of authorship of an employee or officer of the United States Government and is not subject to copyright in the United States under 17 USC 105. | ||
| ``` | ||
|
|
||
| Use a real name of a natural person who is an authorized representative of the contributing entity; pseudonyms or anonymous contributions are not allowed. | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| DRAIOS, INC. � OPEN SOURCE CONTRIBUTION AGREEMENT FOR UNITED STATES GOVERNMENT CONTRIBUTING ENTITIES (�Agreement�) | ||
|
|
||
| Draios, Inc. (�Draios� or �Sysdig�) welcomes the work of others on our open source software projects. To contribute code back to our repositories, we require a contributing entity that is a United States Government agency to complete, and agree to, the Government Contributor Agreement (GCA) set forth here, by and through a designated authorized representative. This agreement clarifies the ability for us to use and incorporate the contributions of a government contributing entity in our projects and products. After agreeing to these terms, a contributing entity may contribute to our projects. To indicate the agreement of the contributing entity, an authorized representative shall follow the procedure set forth below under TO AGREE, after reading this Agreement. A �contributing entity� means any agency or unit of the United States government. We provide a separate CLA for individual contributors. | ||
|
|
||
| You accept and agree to the following terms and conditions for Your present and future Contributions that are submitted to Draios/Sysdig. | ||
|
|
||
| 1. Definitions. "You" (or "Your") shall mean the contributing entity that has authored or otherwise has the right to contribute the Contribution, and that is making this Agreement with Draios/Sysdig. "Contribution" shall mean any original work of authorship, including any modifications or additions to an existing work, that is intentionally submitted by You to Draios/Sysdig for inclusion in, or documentation of, any of the products owned or managed by Draios/Sysdig (the "Work"). For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to Draios/Sysdig or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, Draios/Sysdig for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by You as "Not a Contribution." | ||
|
|
||
| 2. Contributions Not Subject to Copyright. Each Contribution is a work authored by the United States Government or an employee or officer thereof and is not subject to copyright under 17 U.S.C. 105. | ||
|
|
||
| 3. Grant of Patent License. Subject to the terms and conditions of this Agreement, You hereby grant to Draios/Sysdig and to recipients of software distributed by Draios/Sysdig a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims that You have the right to license and that are necessarily infringed by Your Contribution(s) alone or by combination of Your Contribution(s) with the Work to which such Contribution(s) was submitted. If any entity other than Draios/Sysdig institutes patent litigation against You or any other entity (including a cross-claim or counterclaim in a lawsuit) alleging that your Contribution, or the Work to which you have contributed, constitutes direct or contributory patent infringement, then any patent licenses granted to that entity under this Agreement for that Contribution or Work shall terminate as of the date such litigation is filed. | ||
|
|
||
| 4. You represent to Draios/Sysdig that You own or have the right to contribute Your Contributions to Draios/Sysdig, and that You are legally entitled to grant the license set forth above. | ||
|
|
||
| 5. You represent that each of Your Contributions is Your original creation (see section 7 for submissions on behalf of others). You represent that Your Contribution submissions include complete details of any third-party license or other restriction (including, but not limited to, related patents and trademarks) of which You are personally aware and which are associated with any part of Your Contributions. You represent that Your sign-off indicating assent to this Agreement includes the real name of a natural person who is an authorized representative of You, and not a pseudonym, and that You are not attempting or making an anonymous Contribution. | ||
|
|
||
| 6. You are not expected to provide support for Your Contributions, except to the extent You desire to provide support. You may provide support for free, for a fee, or not at all. Unless required by applicable law or agreed to in writing, You provide Your Contributions to Draios/Sysdig on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON- INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. | ||
|
|
||
| 7. If You wish to submit work that is not Your original creation, You may submit it to Draios/Sysdig separately from any Contribution, identifying the complete details of its source and of any license or other restriction (including, but not limited to, related patents, trademarks, and license agreements) of which You are aware, and conspicuously marking the work as "Submitted on behalf of a third-party: [named here]". | ||
|
|
||
| 8. You agree to notify Draios/Sysdig of any facts or circumstances of which you become aware that would make these representations inaccurate in any respect. | ||
|
|
||
| 9. You understand and agree that this project and Your Contribution are public and that a record of the contribution, including all personal information that You submit with it, including the sign-off of Your authorized representative, may be stored by Draios/Sysdig indefinitely and may be redistributed to others. You understand and agree that Draios/Sysdig has no obligation to use any Contribution in any Draios/Sysdig project or product, and Draios/Sysdig may decline to accept Your Contributions or Draios/Sysdig may remove Your Contributions from Draios/Sysdig projects or products at any time without notice. You understand and agree that Draios/Sysdig is not and will not pay You any form of compensation, in currency, equity or otherwise, in exchange for Your Contributions or for Your assent to this Agreement. You understand and agree that You are independent of Draios/Sysdig and You are not, by entering into this Agreement or providing Your Contributions, becoming employed, hired as an independent contractor, or forming any other relationship with Draios/Sysdig relating to employment, compensation or ownership or involving any fiduciary obligation. | ||
|
|
||
| TO AGREE: | ||
| Add the following lines to every GIT commit message: | ||
|
|
||
| falco-CLA-1.0-contributing-govt-entity: Full Legal Name of Entity | ||
| falco-CLA-1.0-signed-off-by: Joe Smith [email protected] | ||
| This file is a work of authorship of an employee or officer of the United States Government and is not subject to copyright in the United States under 17 USC 105. | ||
|
|
||
| Use a real name of a natural person who is an authorized representative of the contributing entity; pseudonyms or anonymous contributions are not allowed. | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| /etc/falco/falco.yaml | ||
| /etc/falco/falco_rules.yaml | ||
| /etc/falco/falco_rules.local.yaml |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.