feature request: inspect fd.name and fd.directory path in the initial mount namespace
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- cpp, linux
- Domain
- operating-systems, security
Research direction
Start with the linked Falco Write below binary dir rule and trace how fd.directory is resolved for container bind-mounts. Done means Falco/sysdig can expose the corresponding path from the initial mount namespace so the rule detects those writes.
Written by the indexing model from the issue text.
Description
The Write below binary dir rule of Falco can't detect writes from containers (with bind-mounts), because fd.directory is resolved into a path in a mount namespace (container), not into the path in the initial mount namespace ("host").
It would be great if Falco/sysdig can also inspect the path in the initial mount namespace.
- Dominant language
- C++
- Stars
- 8.3k
- Forks
- 753
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from draios/sysdig
-
Difficulty 4/5 3-5 days Newbie friendliness 52/100
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
-
difficulty-easy feature-request pinned
Difficulty 3/5 1-2 days Newbie friendliness 25/100
-
feature-request pinned
Difficulty 5/5 Over a week Newbie friendliness 25/100
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
AXERA-TECH/ax-llm#77 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
games-on-whales/wolf#509 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
-
bug-unconfirmed
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
NVIDIA/cuda-samples#453 ·