github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-04 16:20:18 +00:00
Code Issues Projects Releases Wiki Activity

update(userspace/engine): allow the engine to match and handle multiple rules while processing events

Browse Source 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
This commit is contained in:
Lorenzo Susini
2023-08-02 13:23:18 +00:00
committed by poiana
parent 46e8f2c14b
commit 1705c0dab3
7 changed files with 138 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
userspace/engine/falco_source.h
View File

@@ -53,7 +53,7 @@ struct falco_source
// Used by the filter_ruleset interface. Filled in when a rule
// matches an event.
mutable falco_rule m_rule;
mutable std::vector<falco_rule> m_rules;
inline bool is_field_defined(const std::string& field) const
{