0.12.0
v0.12.0
Released 2018-09-11
Major Changes
-
Improved IPv6 Support to fully support use of IPv6 addresses in events, connections and filters [#sysdig/1204]
-
Ability to associate connections with dns names: new filterchecks
fd.*ip.name
allow looking up the DNS name for a connection's IP address. This can be used to identify or restrict connections by dns names e.g.evt.type=connect and fd.sip.name=github.com
. [#412] [#sysdig/1213] -
New filterchecks
user.loginuid
anduser.loginname
can be used to match the login uid, which stays consistent across sudo/su. This can be used to find the actual user running a given process [#sysdig/1189]
Minor Changes
- Upgrade zlib to 1.2.11, openssl to 1.0.2n, and libcurl to 7.60.0 to address software vulnerabilities [#402]
- New
endswith
operator can be used for suffix matching on strings [#sysdig/1209]
Bug Fixes
- Better control of specifying location of lua source code [#406]
Rule Changes
- None for this release.