diff --git a/scripts/CMakeLists.txt b/scripts/CMakeLists.txt index fd8bd320..99dc1a6a 100644 --- a/scripts/CMakeLists.txt +++ b/scripts/CMakeLists.txt @@ -28,7 +28,6 @@ file(COPY "${PROJECT_SOURCE_DIR}/scripts/rpm/falco" DESTINATION "${PROJECT_BINARY_DIR}/scripts/rpm") if(CMAKE_SYSTEM_NAME MATCHES "Linux") - install(PROGRAMS ${SYSDIG_DIR}/scripts/sysdig-probe-loader - DESTINATION ${FALCO_BIN_DIR} - RENAME falco-probe-loader) + install(PROGRAMS ${PROJECT_BINARY_DIR}/scripts/falco-probe-loader + DESTINATION ${FALCO_BIN_DIR}) endif() diff --git a/userspace/engine/rules.cpp b/userspace/engine/rules.cpp index 3e512e5b..24267069 100644 --- a/userspace/engine/rules.cpp +++ b/userspace/engine/rules.cpp @@ -296,7 +296,7 @@ void falco_rules::load_rules(const string &rules_content, for(uint32_t j = 0; j < PPM_EVENT_MAX; j++) { - if(etable[j].flags & EF_DROP_FALCO) + if(etable[j].flags & EF_DROP_SIMPLE_CONS) { lua_pushstring(m_ls, etable[j].name); lua_pushnumber(m_ls, 1); @@ -310,7 +310,7 @@ void falco_rules::load_rules(const string &rules_content, for(uint32_t j = 0; j < PPM_SC_MAX; j++) { - if(stable[j].flags & EF_DROP_FALCO) + if(stable[j].flags & EF_DROP_SIMPLE_CONS) { lua_pushstring(m_ls, stable[j].name); lua_pushnumber(m_ls, 1); diff --git a/userspace/falco/falco.cpp b/userspace/falco/falco.cpp index 4cf46f5e..a5772918 100644 --- a/userspace/falco/falco.cpp +++ b/userspace/falco/falco.cpp @@ -82,7 +82,7 @@ static void usage() "Options:\n" " -h, --help Print this page\n" " -c Configuration file (default " FALCO_SOURCE_CONF_FILE ", " FALCO_INSTALL_CONF_FILE ")\n" - " -A Monitor all events, including those with EF_DROP_FALCO flag.\n" + " -A Monitor all events, including those with EF_DROP_SIMPLE_CONS flag.\n" " -b, --print-base64 Print data buffers in base64.\n" " This is useful for encoding binary data that needs to be used over media designed to.\n" " --cri Path to CRI socket for container metadata.\n" @@ -312,7 +312,7 @@ uint64_t do_inspect(falco_engine *engine, break; } - if(!ev->falco_consider() && !all_events) + if(!ev->simple_comsumer_consider() && !all_events) { continue; } @@ -343,7 +343,7 @@ static void print_all_ignored_events(sinsp *inspector) std::set ignored_event_names; for(uint32_t j = 0; j < PPM_EVENT_MAX; j++) { - if(!sinsp::falco_consider_evtnum(j)) + if(!sinsp::simple_comsumer_consider_evtnum(j)) { std::string name = etable[j].name; // Ignore event names NA* @@ -356,7 +356,7 @@ static void print_all_ignored_events(sinsp *inspector) for(uint32_t j = 0; j < PPM_SC_MAX; j++) { - if(!sinsp::falco_consider_syscallid(j)) + if(!sinsp::simple_comsumer_consider_syscallid(j)) { std::string name = stable[j].name; // Ignore event names NA* @@ -904,7 +904,7 @@ int falco_init(int argc, char **argv) if(!all_events) { - inspector->set_drop_event_flags(EF_DROP_FALCO); + inspector->set_drop_event_flags(EF_DROP_SIMPLE_CONS); } if (describe_all_rules)