Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding a macro for sdjagent.jar running inside agent container #493

Closed
wants to merge 6 commits into from

Conversation

lorenzo-david
Copy link
Contributor

No description provided.

mstemm and others added 6 commits November 19, 2018 11:01
Improved versions of inbound/outbound macros that add coverage for
recvfrom/recvmsg, sendto/sendmsg and also ignore non-blocking syscalls
in a different way.
Process truncated due to comm limit.

Also fix some parentheses for another write_etc_common macro.
Let prometheus-conf write its config below /etc/prometheus.
Currently, we make usage of the macro 'java_running_sdjagent', which
relies on the process command line argument.  We recently noticed that
in certain cases, in a containerized environment, the process command
line does not contain sdjagent.jar. Introducing the
'java_in_agent_container' macro and make use on the two rules that
relied solely on the command line macro to avoid alerts.

Adding a comment within the rule, to explain the need and usage of
both macros.
@mstemm
Copy link
Contributor

mstemm commented Jan 9, 2019

Closing as we already merged most of the changes in #470. Let's create a separate PR just for the sdjagent changes, if we need them.

@mstemm mstemm closed this Jan 9, 2019
@fntlnz fntlnz deleted the remotes/origin/rule-updates-2018-11.v2 branch April 7, 2020 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants