5 ms·
Can this program do more than just observe and trace what happens? Can one use it to set up some rule to suppress some of the syscalls sent to a specific proce
by imcritic 2y ago
Can this program do more than just observe and trace what happens?
Can one use it to set up some rule to suppress some of the syscalls sent to a specific process? Or alter them by some logic on the go?
- geraldcombs 2y agoIt's currently only passive, but that'd be an interesting feature. In order for that to happen we'd have to add that functionality to https://github.com/falcosecurity/libs/ https://github.com/falcosecurity/libs/ along with the necessary plumbing in the UI.