0.7.0

Added

• falcoctl to manage driver download and installation in containers

Changed

• Bump falco libs to 0.18.1 and drivers to 7.3.0+driver, falcoctl 0.10.0
• Bump UBI to 9.4-1214.1729773476

Removed

• falco-driver-loader - replaced with falcoctl

0.7.0-rc1

Added

• falcoctl to manage driver download and installation in containers

Changed

• Bump falco libs to 0.18.1 and drivers to 7.3.0+driver, falcoctl 0.10.0
• Bump UBI to 9.4-1214.1729773476

Removed

• falco-driver-loader - replaced with falcoctl

0.6.3

Changed

• Bump xxhash to 0.8.2 (includes s390x fixes)

Fixed

• Fix main thread issue

0.6.2

Fixed

• Fix segfaulting issues in k8s/kind

0.6.1

Added

• s390x support for libSysFlow

Changed

• Bump Falco libs to 0.13.4 and drivers to 6.0.1+driver
• Update build pipeline to use shared libelf
• Bump UBI to 9.3-1552

0.6.1-rc2-skip-tests

Added

• s390x support for libSysFlow

Changed

• Bump Falco libs to 0.13.4 and drivers to 6.0.1+driver
• Update build pipeline to use shared libelf
• Bump UBI to 9.3-1552

0.6.1-rc1-skip-tests

Added

• s390x support for libSysFlow

Changed

• Bump Falco libs to 0.13.4 and drivers to 6.0.1+driver

0.6.0

Added

• CO-RE eBPF driver support

Changed

• Update c++ compatibility to c++17
• Add sparsehash as part of compiled dependencies
• Bump Falco libs to 0.12.0, driver to 5.1.0
• Bump Falco to 0.35.1
• Bump UBI to 9.3-1361.1699548029

0.6.0-rc1

Added

• CO-RE eBPF driver support

Changed

• Update c++ compatibility to c++17
• Add sparsehash as part of compiled dependencies
• Bump Falco libs to 0.12.0, driver to 5.1.0
• Bump Falco to 0.35.1

0.5.1

Added

• Add support for renameat2 system call
• Strip binaries and static libraries before packaging (to reduce package sizes)
• Add cwd (current working directory) attribute to process object
• Add env (environment variables vector) attribute to process object

Changed

• Add configuration object cleanup in sysflow context object destructor
• Bump Falco libs to 0.11.2, driver to 5.0.1
• Bump Falco to 0.34.1
• Bump UBI to to 8.8-854
• Bump GHC Filesystem version to v1.5.12
• Bump elfutils to 0.187
• Replaced mumurhash with xxhash
• Updated libSysFlow to new libsinsp events API
• Updated build for libtbb v2021.8.0 (updated in Falco libs)

Fixed

• Remove duplicate config variable assignment in sysflow context constructor
• Fixed getPath and getAbsolutePath functions in utils (caused paths for AT syscalls to resolve to an empty string)
• Fix path sanitization (libsinsp PR981)