Roberto Scolaro

Results 48 comments of Roberto Scolaro

A way to solve this issue is to use the `--net=host` flag but this is a terrible idea from a security standpoint: by giving the container access to the host...

After some more digging I discovered that it's possible to check if the jit is enabled using `bpftool` or writing a small program that essentially does the same of bpftool....

I think It is a better solution to maintain the image as minimal as possible but if there is no other solution it's ok. I'll take another look to check...

You are right! I already started to work on it and implemented some basic types! 😄

Are you referring to this action https://github.com/falcosecurity/event-generator/blob/c70bca02787ba330ebe322737f25567d997ab87c/events/k8saudit/yaml/k8s-serviceaccount-created.yaml#L34? In that case I don't see any ref at a ClusterRole 🤔 @leogr