Release v1.9.0

Docker tag: 1.9.0-24205

Added

• eBPF Telemetry: Added support for the `btrfs` filesystem. Prior to this release the sensor would not launch using eBPF if installed under a `btrfs` mount. Note that launching the sensor under Audit mode would work but it would fail to report file hashes. We recommend anyone using `btrfs` as their main filesystem use eBPF. This mostly affects Fedora endpoints.

Changed

• Increase timeout for downloading binaries when sensors or plugins are set to auto-update.

• Increased resiliency of disk buffering in cases the disk got full mid-flushing.

• Enabled disk buffer by default.

• Prevent possible error loop if disk buffering goes stale due to some files being deleted by an user.

Fixed

• Fixed issue where a malformed payload would report errors indefinitely.

• Audit telemetry: fixed issue where some rename events would not get properly reported on certain systems. This mostly affects uek kernels.

Hashes

MD5

0c1c8d5a987bf4446acb26656353ea05 output/x86_64/cfsvcd d2672b4ae7cfa5f51130fbdce551daed output/x86_64/cwp-launch 4347672e9d3ad1b0e150c750351beb3b output/aarch64/cfsvcd 033ee46fbda0d911f0a6144d4f47397e output/aarch64/cwp-launch

SHA256

c15039dbed77b46806789bb62107df098e97e26e48a7b5a7a68cf831163d08f9 output/x86_64/cfsvcd 19c4b263561b6b300dde6b26de558c1d7019d5ff8d7916676c9080832437b1e8 output/x86_64/cwp-launch b87e26874425a6dec7e752f6afbec546534e3c37dc205ac49564e71995e3ab65 output/aarch64/cfsvcd 0d2ec5e1ccec05fbfac6d2880dd101d3aafe11171245c9b8a7ed2680c31a83eb output/aarch64/cwp-launch