Skip to content

Releases: bytedance/Elkeid

Release scanner-v2.2.1.2_20230823_test_only

28 Aug 02:55
Compare
Choose a tag to compare

Release scanner-v2.2.1.1_20230817_test_only

17 Aug 13:47
Compare
Choose a tag to compare

Release scanner-v2.2.1.0_20230804_test_only

04 Aug 07:00
Compare
Choose a tag to compare
remove cgroup limit and fullscan limit

Release v1.7.0.13-driver-ko-20230810

10 Aug 12:34
db989a1
Compare
Choose a tag to compare
Merge pull request #518 from Hackerl/main

add namesapce mount tool

rasp-v2.2.0.7-pre

19 Jul 08:35
db989a1
Compare
Choose a tag to compare
Merge pull request #518 from Hackerl/main

add namesapce mount tool

rasp-v2.2.0.6

06 Jul 11:10
Compare
Choose a tag to compare
fix bug: update musl toolchain path

Release v1.7.0.13-driver-ko-20230620

20 Jun 15:28
34b38ae
Compare
Choose a tag to compare
version updated to 1.7.0.13 (#511)

Signed-off-by: shenping.matt <shenping.matt@bytedance.com>

Release v1.7.0.12-driver-ko-20230620

20 Jun 12:34
Compare
Choose a tag to compare
update driver ci for el8

Release v1.7.0.12-driver-ko-20230615

16 Jun 04:36
Compare
Choose a tag to compare
FIXME: possible leak of kernel info in processing user params

All callers of smith_copy_from_user and smith_get_user are
vulnerable since these 2 functions don't validate the user
parameters (could be addresses in kernel space) which could
be easily manipulated by user apps, eg in write_pre_handler.

The risk is low, since root privilege is required to access
our HIDS log.

Signed-off-by: shenping.matt <shenping.matt@bytedance.com>

Release v1.7.0.12-driver-ko-20230613

15 Jun 12:06
Compare
Choose a tag to compare
FIXME: smith_strim should be avoided for NULL ptrs

only do smith_strim for real argv buffers, NULL or default
"-1" should be avoided

Signed-off-by: shenping.matt <shenping.matt@bytedance.com>