Andrew LeFevre 4f19256298 support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650) ...

* support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open

* default to do_file_open

2026-06-24 18:07:01 +00:00

..

bpf_nop.go

fix: use Go 1.18+ build tag syntax (#53746)

2025-04-07 12:35:51 +00:00

bpf_test.go

surface error when arguments were not able to be read in ebpf command events (#66929)

2026-06-03 18:41:53 +00:00

bpf.go

feat(beams): carry beam_id through identity certificates (#67972)

2026-06-23 13:36:36 +00:00

command_arm64_bpfel.go

ensure the expected ebpf hook will handle command events (#66914)

2026-06-04 15:04:02 +00:00

command_arm64_bpfel.o

ensure the expected ebpf hook will handle command events (#66914)

2026-06-04 15:04:02 +00:00

command_x86_bpfel.go

ensure the expected ebpf hook will handle command events (#66914)

2026-06-04 15:04:02 +00:00

command_x86_bpfel.o

ensure the expected ebpf hook will handle command events (#66914)

2026-06-04 15:04:02 +00:00

command.go

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

common_test.go

Improve Enhanced Session Recording flakiness (#64583)

2026-04-14 15:29:57 +00:00

common.go

feat(beams): carry beam_id through identity certificates (#67972)

2026-06-23 13:36:36 +00:00

disk_arm64_bpfel.go

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

disk_arm64_bpfel.o

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

disk_x86_bpfel.go

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

disk_x86_bpfel.o

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

disk.go

support disk events on Linux kernel 7.0+ by conditionally hooking do_file_open (#67650)

2026-06-24 18:07:01 +00:00

generate.go

Replace aquasecurity/libbpfgo with cilium/ebpf (#60541)

2025-11-11 15:33:32 +00:00

helper.go

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

network_arm64_bpfel.go

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050)

2026-02-19 18:20:18 +00:00

network_arm64_bpfel.o

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

network_x86_bpfel.go

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050)

2026-02-19 18:20:18 +00:00

network_x86_bpfel.o

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

network.go

Improve Enhanced Session Recording flakiness (#64583)

2026-04-14 15:29:57 +00:00