Falco - 0.29.0


| Packages | Download |
| -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| rpm | rpm |
| deb | deb |
| tgz | tgz |

| Images |
| --------------------------------------------------------------------------- |
| docker pull docker.io/falcosecurity/falco:0.29.0 |
| docker pull public.ecr.aws/falcosecurity/falco:0.29.0 |
| docker pull docker.io/falcosecurity/falco-driver-loader:0.29.0 |
| docker pull docker.io/falcosecurity/falco-no-driver:0.29.0 |

Minor Changes

  • update: driver version is 17f5df52a7d9ed6bb12d3b1768460def8439936d now [#1669] - @leogr

Rule Changes

  • rule(list miner_domains): add rx.unmineable.com for anti-miner detection [#1676] - @fntlnz
  • rule(Change thread namespace and Set Setuid or Setgid bit): disable by default [#1632] - @Kaizhe
  • rule(list known_sa_list): add namespace-controller, statefulset-controller, disruption-controller, job-controller, horizontal-pod-autoscaler and persistent-volume-binder as allowed service accounts in the kube-system namespace [#1659] - @sboschman
  • rule(Non sudo setuid): check user id as well in case user name info is not available [#1665] - @Kaizhe
  • rule(Debugfs Launched in Privileged Container): fix typo in description [#1657] - @Kaizhe

Non user-facing changes

Statistics

| Merged PRs | Number |
| --------------- | ------ |
| Not user-facing | 11 |
| Release note | 7 |
| Total | 18 |

\
Release Manager @maxgio92


Details

date
June 22, 2021, 10:56 a.m.
name
0.29.0
type
Minor
👇
Register or login to:
  • 🔍View and search all Falco releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or