feat(ebpf): add capabilities according to all fallbacks

aquasecurity · Jun 11, 2024 · 797b221 · 797b221
1 parent 36c0305
commit 797b221
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/pkg/ebpf/tracee.go b/pkg/ebpf/tracee.go
@@ -365,6 +365,18 @@ func New(cfg config.Config) (*Tracee, error) {
 			if err != nil {
 				return t, errfmt.WrapError(err)
 			}
+			// Also add all capabilities required by fallbacks
+			for _, fallback := range deps.GetFallbacks() {
+				fallbackCaps := fallback.GetDependencies().GetCapabilities()
+				err = caps.BaseRingAdd(fallbackCaps.GetBase()...)
+				if err != nil {
+					return t, errfmt.WrapError(err)
+				}
+				err = caps.BaseRingAdd(fallbackCaps.GetEBPF()...)
+				if err != nil {
+					return t, errfmt.WrapError(err)
+				}
+			}
 		}
 	}