Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Improve compatibility with falco 0.9.0 #357

Merged
merged 2 commits into from
Apr 24, 2018
Merged

Improve compatibility with falco 0.9.0 #357

merged 2 commits into from
Apr 24, 2018

Commits on Apr 24, 2018

  1. Improve compatibility with falco 0.9.0 

    Temporarily remove some rules features that are not compatible with
falco 0.9.0. We'll release a new falco soon, after which we'll add these
rules features back.
    @mstemm
    mstemm committed Apr 24, 2018
    Configuration menu
    Copy the full SHA
    b935d98 View commit details
    Browse the repository at this point in the history

  2. Disable the unexpected udp traffic rule by default 

    Some applications will connect a udp socket to an address only to
test connectivity. Assuming the udp connect works, they will follow
up with a tcp connect that actually sends/receives data.

This occurs often enough that we don't want to update the Unexpected UDP
Traffic rule by default, so add a macro do_unexpected_udp_check which is
set to never_true. To opt-in, override the macro to use the condition
always_true.
    @mstemm
    mstemm committed Apr 24, 2018
    Configuration menu
    Copy the full SHA
    567d59c View commit details
    Browse the repository at this point in the history