github falcosecurity/falco 0.29.0

latest releases: 0.37.1, 0.37.1-rc1, 0.37.0...
2 years ago
Packages Download
rpm rpm
deb deb
tgz tgz
Images
docker pull docker.io/falcosecurity/falco:0.29.0
docker pull public.ecr.aws/falcosecurity/falco:0.29.0
docker pull docker.io/falcosecurity/falco-driver-loader:0.29.0
docker pull docker.io/falcosecurity/falco-no-driver:0.29.0

Minor Changes

  • update: driver version is 17f5df52a7d9ed6bb12d3b1768460def8439936d now [#1669] - @leogr

Rule Changes

  • rule(list miner_domains): add rx.unmineable.com for anti-miner detection [#1676] - @fntlnz
  • rule(Change thread namespace and Set Setuid or Setgid bit): disable by default [#1632] - @Kaizhe
  • rule(list known_sa_list): add namespace-controller, statefulset-controller, disruption-controller, job-controller, horizontal-pod-autoscaler and persistent-volume-binder as allowed service accounts in the kube-system namespace [#1659] - @sboschman
  • rule(Non sudo setuid): check user id as well in case user name info is not available [#1665] - @Kaizhe
  • rule(Debugfs Launched in Privileged Container): fix typo in description [#1657] - @Kaizhe

Non user-facing changes

Statistics

Merged PRs Number
Not user-facing 11
Release note 7
Total 18


Release Manager @maxgio92

Don't miss a new falco release

NewReleases is sending notifications on new releases.