Skip to content

CHANGELOG.md

Latest commit

 

History

History
85 lines (76 loc) · 3.9 KB

CHANGELOG.md

File metadata and controls

85 lines (76 loc) · 3.9 KB
Raw

Change log

This document is maintained in a best effort manner. If you consider your change is worthy of a note, please add a line to the list below. If possible include a PR number for easier tracking.

Next

  • ROX-34920: track symlink events (#1440)
  • ROX-33036: add mount-related operations (#1059)
  • feat(endpoints): add inodes introspection endpoint (#1273)
  • feat: add --replay mode for JSONL event replay without eBPF (#1010)
  • feat(config): configurable loaded BPF programs (#1086)
  • feat(output): add basic opentelemetry output (#971)
  • feat(grpc): add exponential backoff for reconnection attempts (#789)
  • feat: run integration tests on more platforms (#760)
  • ROX-34502: reload mTLS certificates on each gRPC connection attempt (#788)
  • chore: add formatting and linting to integration test code (#783, #784)
  • feat: add code coverage with cargo-llvm-cov and Codecov upload (#745)
  • ROX-30296: adds ACL tracking via inode_set_acl LSM hook (#878)

0.3.0

  • ROX-34663: Migrate from ubi-minimal to ubi-micro (#653)
  • ROX-30256: track files and directories being renamed (#308)
  • ROX-33198: Instrument inode tracking on file open lsm hook (#391)
  • ROX-33217: Instrument inode tracking on directory being created path mkdir (#465)
  • ROX-33216: implement inode tracking for path_rename (#487)
  • ROX-33218: Instrument inode tracking on directory being deleted (#530)
  • ROX-33199: unlink inode tracking (#429)
  • ROX-33197: implement periodic scanning of host paths (#329)
  • feat: make the maximum number of tracked inodes configurable (#409)
  • Moves glob/wildcard matching into Fact. (#323)
  • ROX-33540: adds rate limiting (#499)
  • ROX-33471: do not attach progs when no paths configured (#371)
  • ROX-31937: Generate third-party deps license files. (#192)
  • cleanup(bpf): reduce preemption fragility in overlayfs dedup (#558)
  • ROX-33133: Enable post-quantum crypto-policies for fact (#349)
  • ROX-33133: Enable post-quantum crypto-policies for upstream fact (#364)
  • ROX-32841: Quote args (#295)
  • ROX-31266: Implement tests with valid and invalid utf 8 strings (#251)
  • test: add tests for files being created and modified with text editors (#215)
  • chore(tests): replace eq with diff() for detailed test diagnostics (#314)
  • Update edition to 2024 (#413)
  • cleanup: restrict broadcast channels to the output component (#557)

v0.2

  • feat: sanitize paths generated by calling d_path (#181)
  • ROX-30258: Track file ownership changes (#156)
  • ROX-30257: implement permission change tracking (#157)
  • ROX-31430: delegate TLS to host implementation (#168)
  • feat(ebpf): use bpf_loop for local d_path implementation (#175)
  • 087a210 ROX-30437: basic inode tracking for host path resolution (#166)
  • Add performance test pipeline (#104)
  • ROX-30630: run BPF bootstrap test in CI (#131)
  • Replace custom d_path with bpf_d_path (#154)
  • fix(fact-ebpf): improve kernel compatibility (#125)
  • ROX-30836: implement hotreloading for monitored paths (#120)
  • ROX-30836: implement hotreloading configuration for outputs (#119)
  • ROX-30836: implement configuration hotreloading (#110)
  • ROX-30255: track file deletions (#86)
  • ROX-30438: Reimplement kernel side path filtering (#79)
  • ROX-30254: Track file creation events (#65)
  • ROX-30746: implement layered configuration (#53)
  • ROX-30294: Add prometheus metrics (#40)
  • ROX-30260: Konflux arm64 builds (#35)
  • ROX-30260: add support for arm64 [upstream] (#30)

v0.1

  • Initial release
  • file_open added as the only supported LSM hook.
  • JSON and gRPC outputs.
  • Pre-flight check for BPF LSM support.
  • Miscellaneous helper functions for host information querying.
  • Basic health check endpoint.
  • Basic configuration via CLI and environment variables only.
  • Basic gRPC mock server for validation.
  • CI
    • Basic job for compiling, testing and linting.
    • x86 container builds.
    • Onboarded to Konflux (only half way through).
    • Integrated with MintMaker.
    • Integration tests on Fedora coreos for both GHA and Konflux builds.