Add falco

This commit is contained in:
Jonny Ervine 2024-07-24 21:19:15 +08:00
parent 036d3ac8ad
commit 2713029f96

View File

@ -175,7 +175,7 @@ driver:
# Always set it to false when using Falco with plugins. # Always set it to false when using Falco with plugins.
enabled: true enabled: true
# -- kind tells Falco which driver to use. Available options: kmod (kernel driver), ebpf (eBPF probe), modern_ebpf (modern eBPF probe). # -- kind tells Falco which driver to use. Available options: kmod (kernel driver), ebpf (eBPF probe), modern_ebpf (modern eBPF probe).
kind: kmod kind: modern_ebpf
# -- kmod holds the configuration for the kernel module. # -- kmod holds the configuration for the kernel module.
kmod: kmod:
# -- bufSizePreset determines the size of the shared space between Falco and its drivers. # -- bufSizePreset determines the size of the shared space between Falco and its drivers.