Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update syscall and arch tables #147

Merged
merged 3 commits into from
Nov 22, 2023

Conversation

andrewkroh
Copy link
Member

Bump the versions used to generate the syscall and arch tables and then regenerate.

[git-generate]
docker run -it --rm -v $(pwd):/go-libaudit -w /go-libaudit/auparse golang:1.21 go generate

[git-generate]
docker run -it --rm -v $(pwd):/go-libaudit -w /go-libaudit/auparse golang:1.21 go generate
@andrewkroh
Copy link
Member Author

We should change the syscall table generate to match what go-seccomp-bpf uses which pulls directly from the linux sources instead of audit-userspace. This way we don't depend on that project to have its table up-to-date. As of now there are two syscalls introduced in linux 6.6 that are not listed here.

@elasticmachine
Copy link
Collaborator

💚 Build Succeeded

@andrewkroh andrewkroh added the Team:Security-External Integrations Label for the Security External Integrations team label Nov 22, 2023
@andrewkroh andrewkroh requested a review from a team November 22, 2023 13:53
@andrewkroh andrewkroh merged commit f3dbcfd into elastic:main Nov 22, 2023
3 checks passed
renini pushed a commit to renini/go-libaudit that referenced this pull request Jun 26, 2024
[git-generate]
docker run -it --rm -v $(pwd):/go-libaudit -w /go-libaudit/auparse golang:1.21 go generate
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Team:Security-External Integrations Label for the Security External Integrations team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants