From 797b221a170cef2b15f44a73c8b1f98120916613 Mon Sep 17 00:00:00 2001
From: Alon Zivony <alon.zivony@aquasec.com>
Date: Sun, 7 Apr 2024 22:45:55 +0300
Subject: [PATCH] feat(ebpf): add capabilities according to all fallbacks

---
 pkg/ebpf/tracee.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pkg/ebpf/tracee.go b/pkg/ebpf/tracee.go
index 92bc4234bf53..2c7f4b359523 100644
--- a/pkg/ebpf/tracee.go
+++ b/pkg/ebpf/tracee.go
@@ -365,6 +365,18 @@ func New(cfg config.Config) (*Tracee, error) {
 			if err != nil {
 				return t, errfmt.WrapError(err)
 			}
+			// Also add all capabilities required by fallbacks
+			for _, fallback := range deps.GetFallbacks() {
+				fallbackCaps := fallback.GetDependencies().GetCapabilities()
+				err = caps.BaseRingAdd(fallbackCaps.GetBase()...)
+				if err != nil {
+					return t, errfmt.WrapError(err)
+				}
+				err = caps.BaseRingAdd(fallbackCaps.GetEBPF()...)
+				if err != nil {
+					return t, errfmt.WrapError(err)
+				}
+			}
 		}
 	}