# Blog: Falco Weekly 48 - 2023

DevFeed: [Blog: Falco Weekly 48 - 2023](<https://devfeed.tech/articles/blog-falco-weekly-48-2023-32511.md>)

Original publisher: [Read original article](<https://falco.org/blog/falco-w-48-2023-weekly-recap/>)

Published: 2023-12-01T00:00:00Z

Content type: article

Language: en

Sources: [Falco - Falco](<https://devfeed.tech/sources/falco-falco.md>), [Falco - The Falco blog](<https://devfeed.tech/sources/falco-the-falco-blog.md>)

Topics: [Falco](<https://devfeed.tech/topics/falco.md>), [ci](<https://devfeed.tech/topics/ci.md>), [eBPF](<https://devfeed.tech/topics/ebpf.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [changes](<https://devfeed.tech/tags/changes.md>), [ci](<https://devfeed.tech/tags/ci.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [falco](<https://devfeed.tech/tags/falco.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [weekly](<https://devfeed.tech/tags/weekly.md>)

## AI overview

A weekly recap of Falco development covering library cleanup, safer parameter handling, expanded kmod and legacy eBPF probe support, CI driver build jobs, bug fixes, startup system information, state metrics configuration, and driver-selection updates.

## Source excerpt

What happened in Falco this week? Let's go through the major changes that happened in various repositories under the falcosecurity organization. Libs The anticipated 0.14.0 libs tag (and its driver counterpart) are still a bit late, unfortunately. Anyway, spring cleaning went on once again this week! cleaned up dup3 flags param: https://github.com/falcosecurity/libs/pull/1469 cleaned up other params inconsistencies in the drivers: https://github.com/falcosecurity/libs/pull/1512 dropped b64 dep: https://github.com/falcosecurity/libs/pull/1518 dropped tinydir dep: https://github.com/falcosecurity/libs/pull/1516 removed some warning suppressions: https://github.com/falcosecurity/libs/pull/1519 cleaned up big unused function sinsp_evt::get_param_as_json: https://github.com/falcosecurity/libs/pull/1523 The big safer parameter handling PR was merged, making libs much more robust! Moreover, ppc64le support was extended to kmod and legacy ebpf probe, and we added CI jobs to test the build of drivers on it! Thanks to Afsan Hossain for his big contribution! Finally, some more fixes: build on s390x was fixed: https://github.com/falcosecurity/libs/pull/1522 some recently introduced regressions were fixed: https://github.com/falcosecurity/libs/pull/1524 fixed a memleak in sinsp_dns_manager: https://github.com/falcosecurity/libs/pull/1526 Rumors have it coming next week: More fixes: https://github.com/falcosecurity/libs/pull/1530, https://github.com/falcosecurity/libs/pull/1528 Falco We bumped libs and driver to latest master: https://github.com/falcosecurity/falco/pull/2929. Moreover, Falco will now print system info during startup: https://github.com/falcosecurity/falco/pull/2927. Falco does now expose a new config option to enable libsinsp state metrics: https://github.com/falcosecurity/falco/pull/2883 Finally, the new driver selection mechanism PR was merged! Falcoctl Some fixes on top of the new driver-loader happened: fixed up naming for the new Falco driver selection in co