github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-24 17:08:52 +00:00
Code Issues Projects Releases Wiki Activity

Revert "fix(engine): apply output substitutions for all sources"

Browse Source 
This reverts commit 4ef7c9553a.

Signed-off-by: Gianmatteo Palmieri <mail@gian.im>
This commit is contained in:
Gianmatteo Palmieri 2024-06-04 18:02:00 +02:00 committed by poiana
parent 2117f3031d
commit 160e35e801
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
userspace/engine/rule_loader_compiler.cpp
View File

@ -509,7 +509,10 @@ void rule_loader::compiler::compile_rule_infos(
// build rule output message // build rule output message
rule.output = r.output; rule.output = r.output;
if (r.source == falco_common::syscall_source)
{
apply_output_substitutions(cfg, rule.output); apply_output_substitutions(cfg, rule.output);
}
// validate the rule's output // validate the rule's output
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err)) if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))