Code

Add execname support#1664

Code

Merged

DelusionalOptimist merged 10 commits intokubearmor:mainkubearmor/KubeArmor:mainfrom daemon1024:add-execname-supportdaemon1024/KubeArmor:add-execname-supportCopy head branch name to clipboardMar 7, 2024

+308-222

Commits

Commits on Mar 7, 2024

• enhance(bpflsm): match just dentry names to support execname policymatching

  Show description for 0d47886
  daemon1024

  committed
  0d47886

• feat(crd): support execname in Process spec

  Show description for 0163565
  daemon1024

  committed
  0163565

• feat(enforcer,feeder): parse execname into lsm rules and support policy matching on alerts

  Show description for 22fdf1b
  daemon1024

  committed
  22fdf1b

• test: add execname testcase

  Show description for 694e5d8
  daemon1024

  committed
  694e5d8

• fix(hsp/systemd): parse both matchpaths and matchdir together on hsp event

  Show description for 719f1a9
  daemon1024

  committed
  719f1a9

• fix(hsp): missing policy name during restoration

  Show description for 9e7f790
  daemon1024

  committed
  9e7f790

• feat(hsp): support execname on apparmor hsp

  Show description for 0dba917
  daemon1024

  committed
  0dba917

• feat(snitch): use containerd socket in docker runtime if available

  Show description for 2922442
  daemon1024

  committed
  2922442

• chore: compile object files again on Linux 5.15

  Show description for 094bff8
  DelusionalOptimist

  committed
  094bff8

• hotfix(ci): disabling docker from runtime

  Show description for c0761bf
  daemon1024

  committed
  c0761bf