github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-31 14:20:04 +00:00
Code Issues Projects Releases Wiki Activity

Revert "fix(engine): apply output substitutions for all sources"

Browse Source 
This reverts commit 4ef7c9553a.

Signed-off-by: Gianmatteo Palmieri <mail@gian.im>
This commit is contained in:
Gianmatteo Palmieri
2024-06-04 18:02:00 +02:00
committed by poiana
parent 35395728cc
commit 1c66b640f2
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
userspace/engine/rule_loader_compiler.cpp
View File

@@ -509,7 +509,10 @@ void rule_loader::compiler::compile_rule_infos(
// build rule output message
rule.output = r.output;
apply_output_substitutions(cfg, rule.output);
if (r.source == falco_common::syscall_source)
{
apply_output_substitutions(cfg, rule.output);
}
// validate the rule's output
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))