Release v1.5.3

Fixed

• In rare cases, the sensor could hang during shutdown if too many containers were started/stopped at the same time

• Audit telemetry: Do not emit filemod related errors for audit telemetry on unsupported kernels

• Audit telemetry: Do not emit filemod events for rules that do not match the ones created by the sensor

• Audit telemetry: Do not error out for filemod rules that already exist being re-added

• Audit telemetry: Do not fail for filemod rules that have already been deleted

• Audit telemetry: Resolve hanging issues caused by the audit reader thread not exiting

• Audit telemetry: Handle audit inconsistencies caused by missing messages or failure to shutdown more robustly

Changed

• Manage eBPF and Audit filemod feature flags separately

Added

• Add a watchdog that periodically checks if vital portions of the sensor are hanging. At the moment this includes hanging during shutdown, no longer responding to safemode requests, and the telemetry pipeline.

Hashes

MD5

e561e0116f318db2d682078c3154182a x86_64/cfsvcd
b0fae5e9f09611bbb7cf77af8cb5cd1f x86_64/cwp-launch
75f17b13e967b333c4ac5cc184bb2a28 aarch64/cfsvcd
b3be9c633e985871878940790a33f5d6 aarch64/cwp-launch

SHA256

477b181c542a2f49276b01aec6234f6bc61960cc963be08e801c3c6d5832a951 x86_64/cfsvcd
1b406d38106334e6ea64b597da421bc188dd1ef69010edc31bee599ef70700a6 x86_64/cwp-launch
956e31397c602606c31b4c27ead55fd264b7241f49a08e0ffbcc981613dbf6ce aarch64/cfsvcd
3897f0ffaa3ee13e84280e97463f1e02972291542be4ee861d65f898fa86cb31 aarch64/cwp-launch