{"push_id":1334724933,"size":28,"distinct_size":16,"ref":"refs/heads/dev","head":"086858adb841f4083a26a509b5715c8055a39dc5","before":"793c394abe290d3cfbcfd981b2077adebb3f64d4","commits":[{"sha":"194813bfddb67b75701588437cec111619dc0b55","author":{"name":"Loris Degioanni","email":"06c9e6dc6f023d8e046bcfff6094fa4d31a96d8a@sysdig.com"},"message":"bugfix: NULL pointer deference","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/194813bfddb67b75701588437cec111619dc0b55"},{"sha":"7265887e2970180c7a9d2615110297c083232124","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"K8s services selectors not updated at runtime #185; K8s selection returns true when selectors or labels empty #186","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/7265887e2970180c7a9d2615110297c083232124"},{"sha":"9c21004ca30af8122df49172e51f263db2b137be","author":{"name":"Mark Stemm","email":"ee0738fd734a71825774e3bf64b7debc57eb46e5@sysdig.com"},"message":"Flag bind events with EF_MODIFIES_STATE. (#635)\n\nFlag bind enter and exit events with EF_MODIFIES_STATE.\r\n\r\nbind exit events need the flag because they can change the type of\r\nm_fdinfo from SCAP_FD_IPV{4,6}_SOCK to _SERVSOCK based on the port\r\nnumber.\r\n\r\nbind enter events need the flag because if filters run and don't match\r\non the enter event, it clears the thread's m_lastevent_type, which\r\nprevents the exit event from getting a handle to the m_fdinfo.","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/9c21004ca30af8122df49172e51f263db2b137be"},{"sha":"62fdb817399a6ca5d2757099886dc62085457a59","author":{"name":"Mark Stemm","email":"ee0738fd734a71825774e3bf64b7debc57eb46e5@sysdig.com"},"message":"Support glob matching on strings. (#653)\n\n* Whitespace diffs.\r\n\r\nCommitting separate from other changes.\r\n\r\n* Fix windows build.\r\n\r\nWindows has min()/max() macros that conflict with the\r\nfunctions from numeric_limits::min()/max(), so disable them via #define\r\nNOMINMAX.\r\n\r\n* Support glob matching on strings.\r\n\r\nAdd new comparison \"glob\" that allows for glob matching on\r\npathnames. The glob matching is handled by a utils function glob_match\r\nthat calls fnmatch on windows and PathMatchSpec on windows.\r\n\r\nThis handles simple stuff like *, ?, etc. but not shell specific\r\nextensions.","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/62fdb817399a6ca5d2757099886dc62085457a59"},{"sha":"ee01b9b025bcbe4aee5b024a3fc9f84ee2c3c707","author":{"name":"Loris Degioanni","email":"06c9e6dc6f023d8e046bcfff6094fa4d31a96d8a@sysdig.com"},"message":"prevent drill down from list views","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/ee01b9b025bcbe4aee5b024a3fc9f84ee2c3c707"},{"sha":"de076df33119537da6c7a247efb6ea2268908fad","author":{"name":"Mark Stemm","email":"ee0738fd734a71825774e3bf64b7debc57eb46e5@sysdig.com"},"message":"Addl docker container info (#655)\n\n* Whitespace changes.\r\n\r\nChecking in separate from other changes.\r\n\r\n* Change glob matching to allow path separators.\r\n\r\nChange glob matching to allow *, ? to match the path separator\r\n/. This allows for matching /proc/* as anything starting with /proc\r\ninstead of having to match all path components.\r\n\r\n* Add ability to detect/show privileged status.\r\n\r\nIn sinsp_container_manager::parse_docker(), parse the Privileged field\r\nout of the json output and use it to set the instance variable\r\nm_privileged.\r\n\r\nModify container_to_json/parse_container_json_evt to dump/read the\r\nprivileged status from .scap files.\r\n\r\nNew filtercheck container.privileged returns the privileged status\r\nas a boolean.\r\n\r\nAlthough other container types support the notion of privileged, I only\r\nsupport this filtercheck for docker containers. For non-docker\r\ncontainers, container.privileged returns NULL.\r\n\r\nWrite privileged to/from scap files.\r\n\r\n* Add ability to display container mount info.\r\n\r\nIn sinsp_container_manager::parse_docker(), parse the Mounts field into\r\na vector of class container_mount_info objects.\r\n\r\nModify container_to_json/parse_container_json_evt to dump/read the\r\nmount information from .scap files.\r\n\r\nNew filtercheck container.mounts displays the mount information as a\r\ncomma-separated list of mount tuples\r\n<source>:<dest>:<mode>:<rdwr>:<propagation>, for example:\r\n\r\nmounts=/tmp:/foo/tmp::true::,/var/lib/docker/volumes/51c63c9efcd052551dd4898736dffb2692acbf6afd8d3f4d2f0cb89a7f8ace4a/_data:/data::true:rprivate:\r\n\r\nNote how empty values for mode/propagation turn into empty strings.\r\n\r\nThis output is pretty awkward and verbose, so there are additional\r\nfilterchecks that allow you to select any given attribute from a\r\nsingle mount. New filterchecks\r\ncontainer.mount.{source,dest,dest,mode,rdwr,propagation} allow selecting\r\nany of the mount information indexed either by mount id\r\n\"container.mount.mode[0]\" or mount source\r\n\"container.mount.mode[/var/log]\". container.mount.source is different in\r\nthat it's indexed by the mount destination instead of the mount source.\r\n\r\nWhen selecting a mount by source/dest pathname, you can provide a glob\r\nmatch instead (e.g. container.mount.mode[/var/log/*]). In this case, the\r\nfirst matching mount is returned.\r\n\r\nYou can also use this indexing to return all the mount information for a\r\nsingle mount. New filtercheck container.mount returns the tuple\r\ninformation for a single mount, indexed by number (container.mount[0])\r\nor source path/glob (container.mount[/var/log]. This can also be used to\r\ntest if a mount exists, like container.mount[/proc/*] to detect\r\ncontainers that mount /proc or other sensitive directories.\r\n\r\nWrite mounts to/from .scap files.","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/de076df33119537da6c7a247efb6ea2268908fad"},{"sha":"e4797af93e83acff8056e546b0f9fb47166544c8","author":{"name":"Mark Stemm","email":"ee0738fd734a71825774e3bf64b7debc57eb46e5@sysdig.com"},"message":"Always initialize privileged to false. (#658)\n\nThis way, we don't fully rely on the container type being docker or the\r\nresponse from GET /container/XXX/json having a Privileged field.","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/e4797af93e83acff8056e546b0f9fb47166544c8"},{"sha":"83fd2adbdd9081a8f6cabf62011fe6916dce8392","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"eliminate inti order warning","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/83fd2adbdd9081a8f6cabf62011fe6916dce8392"},{"sha":"92c9cf9f7d64810955508c47821104d8319463fa","author":{"name":"Gianluca Borello","email":"5fd4479fe440b1953ccb5c2d91b91bf87c6ceced@sysdig.com"},"message":"Try to fix coreos build","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/92c9cf9f7d64810955508c47821104d8319463fa"},{"sha":"8b152d6e4160dc1cd52f7bbb890083fed4dce347","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"conceal credentials in logs","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/8b152d6e4160dc1cd52f7bbb890083fed4dce347"},{"sha":"4206436658d242e7128ad4a98fa723dad0f2f06a","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"merge k8s-async-connect into dev","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/4206436658d242e7128ad4a98fa723dad0f2f06a"},{"sha":"700a4477457d1c1b1791856ec64e449f3106f650","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"mesos fix for agent #193","distinct":false,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/700a4477457d1c1b1791856ec64e449f3106f650"},{"sha":"e2c248f3e8d037e44c86a27aa0d13a9960484b02","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"support for mesos/marathon basic auth","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/e2c248f3e8d037e44c86a27aa0d13a9960484b02"},{"sha":"a1af66ceb7bbd132a5f7154a8071fb4ac43aea15","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"don't resolve unix socket name","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/a1af66ceb7bbd132a5f7154a8071fb4ac43aea15"},{"sha":"af7952f18ede00dabdb6a50b4f4eb25838f31bac","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"support for mesos/marathon separate credentials and http redirection","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/af7952f18ede00dabdb6a50b4f4eb25838f31bac"},{"sha":"fcd2679865c70c069b8b538a7340d755438cffa2","author":{"name":"Chris Crane","email":"d89e0dd2d9724aa08e99246e5d41b08cb6751a7d@users.noreply.github.com"},"message":"missing line break in cla tag","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/fcd2679865c70c069b8b538a7340d755438cffa2"},{"sha":"71861c878f82140c1d841e33431891adc4e81c67","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@pocoproject.org"},"message":"add uri validation","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/71861c878f82140c1d841e33431891adc4e81c67"},{"sha":"0d6fc9a930489f5fb1fef050443c4824a6209ac0","author":{"name":"Loris Degioanni","email":"06c9e6dc6f023d8e046bcfff6094fa4d31a96d8a@sysdig.com"},"message":"use vmalloc instead of kmalloc to allocate the PPM_IOCTL_GET_PROCLIST sotrage. Even if the required amount of memory is typically small, there's no need to use kmalloc since we don't need contiguous pages. vmalloc will have lower probability of failing.","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/0d6fc9a930489f5fb1fef050443c4824a6209ac0"},{"sha":"9c57306fa69883a1f7ead91ea04e65cc48aad773","author":{"name":"Mark Stemm","email":"ee0738fd734a71825774e3bf64b7debc57eb46e5@sysdig.com"},"message":"Path prefix search (#660)\n\n* Add ability to test a path against many prefixes\r\n\r\nAdd a data structure that allows testing a path aka /var/log/messages\r\nagainst a set of path prefixes (/usr, /bin, /var/log, ...).\r\n\r\nThinking ahead to use in libsinsp, the search structure uses pointer +\r\nlength pairs instead of strings, meaning that it does not copy any data,\r\nonly refers to it. This way the structure doesn't copy filtercheck\r\nvalues.\r\n\r\nIn order to share the idea of a pair of pointer + length between this\r\nstructure and the unordered_set used by \"in (...)\" set membership tests,\r\nmove the hashing and equality function from filterchecks to a standalone\r\nheader filter_value.h and use it for the unordered_map.\r\n\r\nThe paths are held in a tree-like structure. At each level, an unordered\r\nmap has the path components for that level and a sub-tree of paths for\r\nthat root.\r\n\r\nThe tree can change if new search paths are prefixes of any of the\r\ncurrent paths (the sub-tree for the longer path is replaced by the\r\nprefix). If a new search path is a suffix of any existing path no change\r\nis made, as it is already covered by the prefix.\r\n\r\nMatching involves splitting off the first directory component and\r\ntesting it against the values at that level. If a match is found, it\r\nrecursively calls match for the subtree.\r\n\r\n* Add pmatch operator, using prefix_search struct.\r\n\r\nRemove the definitions of filter_value_member_t/hash function/equality\r\nfunction from filterchecks.h, renaming it to filter_value_t along the\r\nway.\r\n\r\nAdd an operator CO_PMATCH/\"pmatch\" which takes a set of values like\r\nCO_IN does, but requires that the left hand side of the comparison is a\r\nPT_CHARBUF. When filter values are added, they are added to the new\r\npath_prefix_search object m_val_storages_paths.\r\n\r\nin ::flt_compare, when the operator is CO_PMATCH, test the value against\r\nm_val_storages_paths.\r\n\r\nAs a result, you can run sysdig using a command line like:\r\n\r\nsudo ./userspace/sysdig/sysdig \"evt.type=open and fd.directory\r\npmatch (/var, /usr)\"\r\n\r\nand see all the file opens for files below either /var or /usr.","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/9c57306fa69883a1f7ead91ea04e65cc48aad773"},{"sha":"368b1fcf5fad173c8e92880c9260c1193c46cd0a","author":{"name":"Alex Fabijanic","email":"af52d3065b8b78750f844012b8e34dbc454a5a0a@sysdig.com"},"message":"mesos redirection; Json error on events parsing (agent #205)","distinct":true,"url":"https://api.github.com/repos/kamalesh-babulal/sysdig/commits/368b1fcf5fad173c8e92880c9260c1193c46cd0a"}]}
{"actor":{"display_login":"kamalesh-babulal"}}