v0.9.1

This is a small release that only contains bug fixes, it is recommended to use over v0.9.0. As this comes two days after the prior release, take a look at v0.9.0's release notes to see highlights of its improvements and added features!

Docker images

• docker pull docker.io/aquasec/tracee:0.9.1 (embedded eBPF CO-RE obj with BTFHUB support)
• docker pull docker.io/aquasec/tracee:full-0.9.1 (compiles non CO-RE eBPF object on startup)

Full Changelog

58399f0 - k8s: update image tag to latest (#2293) (Jose Donizetti)
0842226 - capabilities: do not drop privileges in tracee-ebpf by default (Rafael David Tinoco)
00c7bd2 - symbols_loaded: raise privileges when needed (Rafael David Tinoco)
9826640 - path_resolver: raise privileges when needed (Rafael David Tinoco)
7ef3541 - probes: add NET_ADMIN capability as required for tcProbes (Rafael David Tinoco)
73fb7eb - capabilities: make new capabilities a singleton (Rafael David Tinoco)
02804d8 - capabilities: raise caps for init_namespaces event (Yaniv Agman)
73273d2 - caps: raise privileges for cgroupv1 mount (#2290) (Rafael David Tinoco)
cbaeac2 - pkg/ebpf: fix symbols_loaded initialization crash (#2284) (Alon Zivony)
1bb7264 - capabilities: fix: raise caps ring for privileged operations (#2280) (Rafael David Tinoco)

Full Changelog: v0.9.0...v0.9.1