8000 fix(epbf): fix handling of compat tasks in syscall checkers by oshaked1 · Pull Request #4562 · aquasecurity/tracee · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix(epbf): fix handling of compat tasks in syscall checkers #4562

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 29, 2025

Conversation

oshaked1
Copy link
Contributor
@oshaked1 oshaked1 commented Jan 28, 2025

Convert to 64bit syscall ID before checking if the syscall is selected.
Additionally, remove false positive of VDSO triggered syscalls being detected as suspicious.

Copy link
Member
@geyslan geyslan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@oshaked1 oshaked1 force-pushed the compat_fix branch 2 times, most recently from 84bac2b to 99a2aca Compare January 29, 2025 12:24
@geyslan
Copy link
Member
geyslan commented Jan 29, 2025

/fast-forward

@github-actions github-actions bot merged commit 99a2aca into aquasecurity:main Jan 29, 2025
41 checks passed
@oshaked1 oshaked1 deleted the compat_fix branch January 29, 2025 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0