elastic/ebpf issues and pull requests

#110 - Adds external/supplementary user to exec events

Pull Request - State: closed - Opened by Tacklebox over 2 years ago - 1 comment

#109 - Backport code owners and CI to 8.3

Pull Request - State: closed - Opened by lrishi over 2 years ago

#108 - Add codeowners

Pull Request - State: closed - Opened by lrishi over 2 years ago

#107 - Dockerize build

Pull Request - State: closed - Opened by lrishi over 2 years ago

#106 - [DO NOT REVIEW] Test PR for CI

Pull Request - State: closed - Opened by rhysre over 2 years ago

#105 - Multi kernel testing in CI

Pull Request - State: closed - Opened by lrishi over 2 years ago

#104 - [Do not review] Test PR

Pull Request - State: closed - Opened by lrishi over 2 years ago

#103 - EventProbe: capture process tty write

Pull Request - State: closed - Opened by mmat11 over 2 years ago - 6 comments

#102 - Add a few missing NULL checks

Pull Request - State: closed - Opened by stanek-michal over 2 years ago

#101 - Remove Clang version and git revision from eBPF binaries

Pull Request - State: closed - Opened by stanek-michal over 2 years ago
Labels: please review

#100 - EventProbe: enrich fork,exec,exit events with pids subsys cgroup path

Pull Request - State: closed - Opened by mmat11 over 2 years ago

#99 - [Do not review] Test PR

Pull Request - State: closed - Opened by lrishi over 2 years ago
Labels: do not review

#98 - EventProbe: keep track of state changes for file events

Pull Request - State: closed - Opened by mmat11 over 2 years ago

#97 - Fix path resolver sometimes leaving the buffer containing garbage

Pull Request - State: closed - Opened by rhysre over 2 years ago

#96 - EventProbe: delete state right after sending the event

Pull Request - State: closed - Opened by mmat11 over 2 years ago - 3 comments

#95 - LibEbpfEvents: properly detect bpf trampoline support

Pull Request - State: closed - Opened by mmat11 over 2 years ago - 1 comment

#94 - Initial check-in of multi-kernel testing functionality for BPF probes

Pull Request - State: closed - Opened by rhysre over 2 years ago - 3 comments

#93 - File access probes report paths relative to the container mount namespace

Issue - State: closed - Opened by rhysre over 2 years ago - 1 comment
Labels: bug

#92 - Probes fail to load on kernels that inline `do_renameat2`

Issue - State: closed - Opened by rhysre over 2 years ago - 3 comments
Labels: bug, v8.2.0

#91 - Probes fail to verify pre-5.10.10

Issue - State: closed - Opened by rhysre over 2 years ago - 1 comment
Labels: bug, v8.4.0

#90 - Change eBPF code license to dual GPLv2/BSD

Pull Request - State: closed - Opened by rhysre over 2 years ago - 3 comments

#89 - Properly detect bpf trampoline support

Issue - State: closed - Opened by mmat11 over 2 years ago
Labels: enhancement

#88 - contrib: update libbpf to v0.7.0, replace all deprecated functions and remove unneeded code

Pull Request - State: closed - Opened by mmat11 over 2 years ago - 6 comments

#80 - Merge changes from the 8.1 branch in main

Pull Request - State: closed - Opened by nicholasberlin over 2 years ago
Labels: please review, v8.2.0

#77 - Add setuid/setgid events

Pull Request - State: closed - Opened by rhysre over 2 years ago - 1 comment
Labels: please review, v8.2.0

#77 - Add setuid/setgid events

Pull Request - State: closed - Opened by rhysre over 2 years ago - 1 comment
Labels: please review, v8.2.0

#73 - investigate duplicate rename events from mount namespace

Issue - State: closed - Opened by fntlnz almost 3 years ago - 1 comment
Labels: v8.2.0

#70 - Investigate whether it's possible to make PathResolver more resilient to long paths

Issue - State: open - Opened by mmat11 almost 3 years ago - 1 comment
Labels: enhancement

#69 - Agree on the Kernel version used to generate vmlinux.h

Issue - State: closed - Opened by mmat11 almost 3 years ago - 7 comments

#66 - EventProbe: Compatibility with Kernels >= 5.10

Issue - State: closed - Opened by fntlnz almost 3 years ago - 2 comments

#64 - Two small BPF fixups

Pull Request - State: closed - Opened by rhysre almost 3 years ago - 1 comment

#64 - Two small BPF fixups

Pull Request - State: closed - Opened by rhysre almost 3 years ago - 1 comment

#57 - Add dentry resolver and pass up CWD on exec

Pull Request - State: closed - Opened by rhysre almost 3 years ago - 2 comments

#56 - Add setsid/exit probe, flesh out fork/exec probes

Pull Request - State: closed - Opened by rhysre almost 3 years ago

#53 - Add support for deleting a single item from map

Pull Request - State: closed - Opened by stanek-michal almost 3 years ago - 4 comments
Labels: please review

#52 - Format code and enforce code formatting in Jenkins

Pull Request - State: closed - Opened by rhysre almost 3 years ago - 2 comments

#51 - Add basic fork/exec probes, rework wire format

Pull Request - State: closed - Opened by rhysre almost 3 years ago

#51 - Add basic fork/exec probes, rework wire format

Pull Request - State: closed - Opened by rhysre almost 3 years ago

#37 - deps(contrib): bump to libbpf 0.5.0

Pull Request - State: closed - Opened by leodido about 3 years ago - 6 comments

#35 - tests: BPFTcFilterTests map unpin on teardown

Pull Request - State: closed - Opened by fntlnz about 3 years ago
Labels: please review

#34 - BPFTcFilterTests failing on AL2 x64 and aarch64

Issue - State: open - Opened by fntlnz about 3 years ago - 1 comment
Labels: bug

#33 - Fix map creation on AWS Linux

Pull Request - State: closed - Opened by stanek-michal about 3 years ago - 1 comment
Labels: please review

#30 - Disable stack protector for TcFilter

Pull Request - State: closed - Opened by fntlnz about 3 years ago

#28 - Rename TcFilterTest to BPFTcFilterTests

Pull Request - State: closed - Opened by fntlnz about 3 years ago

#27 - Add option to allow IP subnets

Pull Request - State: closed - Opened by stanek-michal about 3 years ago - 6 comments
Labels: please review

#25 - Add ARM64 support

Pull Request - State: closed - Opened by stanek-michal about 3 years ago
Labels: please review, v7.16.0

#22 - Moving COPYING.txt contents into LICENSE.txt

Pull Request - State: closed - Opened by dwhyrock about 3 years ago

#19 - Fix libbpf map file descriptor leak

Pull Request - State: closed - Opened by stanek-michal about 3 years ago - 3 comments
Labels: please review

#12 - Update main branch

Pull Request - State: closed - Opened by stanek-michal over 3 years ago

GitHub / elastic/ebpf issues and pull requests