github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-02 07:05:54 +00:00
Code Issues Projects Releases Wiki Activity

chore: remove some more unnecessary, legacy references to falco in sysdig

Browse Source 
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
Loris Degioanni
2019-11-01 14:17:46 -07:00
committed by Lorenzo Fontana
parent cf8395c7ed
commit 3b45e58217
3 changed files with 9 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/CMakeLists.txt
View File

@@ -28,7 +28,6 @@ file(COPY "${PROJECT_SOURCE_DIR}/scripts/rpm/falco"
DESTINATION "${PROJECT_BINARY_DIR}/scripts/rpm") DESTINATION "${PROJECT_BINARY_DIR}/scripts/rpm")
if(CMAKE_SYSTEM_NAME MATCHES "Linux") if(CMAKE_SYSTEM_NAME MATCHES "Linux")
install(PROGRAMS ${SYSDIG_DIR}/scripts/sysdig-probe-loader install(PROGRAMS ${PROJECT_BINARY_DIR}/scripts/falco-probe-loader
DESTINATION ${FALCO_BIN_DIR} DESTINATION ${FALCO_BIN_DIR})
RENAME falco-probe-loader)
endif() endif()

4
userspace/engine/rules.cpp
View File

@@ -296,7 +296,7 @@ void falco_rules::load_rules(const string &rules_content,
for(uint32_t j = 0; j < PPM_EVENT_MAX; j++) for(uint32_t j = 0; j < PPM_EVENT_MAX; j++)
{ {
if(etable[j].flags & EF_DROP_FALCO) if(etable[j].flags & EF_DROP_SIMPLE_CONS)
{ {
lua_pushstring(m_ls, etable[j].name); lua_pushstring(m_ls, etable[j].name);
lua_pushnumber(m_ls, 1); lua_pushnumber(m_ls, 1);
@@ -310,7 +310,7 @@ void falco_rules::load_rules(const string &rules_content,
for(uint32_t j = 0; j < PPM_SC_MAX; j++) for(uint32_t j = 0; j < PPM_SC_MAX; j++)
{ {
if(stable[j].flags & EF_DROP_FALCO) if(stable[j].flags & EF_DROP_SIMPLE_CONS)
{ {
lua_pushstring(m_ls, stable[j].name); lua_pushstring(m_ls, stable[j].name);
lua_pushnumber(m_ls, 1); lua_pushnumber(m_ls, 1);

10
userspace/falco/falco.cpp
View File

@@ -82,7 +82,7 @@ static void usage()
"Options:\n" "Options:\n"
" -h, --help Print this page\n" " -h, --help Print this page\n"
" -c Configuration file (default " FALCO_SOURCE_CONF_FILE ", " FALCO_INSTALL_CONF_FILE ")\n" " -c Configuration file (default " FALCO_SOURCE_CONF_FILE ", " FALCO_INSTALL_CONF_FILE ")\n"
" -A Monitor all events, including those with EF_DROP_FALCO flag.\n" " -A Monitor all events, including those with EF_DROP_SIMPLE_CONS flag.\n"
" -b, --print-base64 Print data buffers in base64.\n" " -b, --print-base64 Print data buffers in base64.\n"
" This is useful for encoding binary data that needs to be used over media designed to.\n" " This is useful for encoding binary data that needs to be used over media designed to.\n"
" --cri <path> Path to CRI socket for container metadata.\n" " --cri <path> Path to CRI socket for container metadata.\n"
@@ -312,7 +312,7 @@ uint64_t do_inspect(falco_engine *engine,
break; break;
} }
if(!ev->falco_consider() && !all_events) if(!ev->simple_comsumer_consider() && !all_events)
{ {
continue; continue;
} }
@@ -343,7 +343,7 @@ static void print_all_ignored_events(sinsp *inspector)
std::set<string> ignored_event_names; std::set<string> ignored_event_names;
for(uint32_t j = 0; j < PPM_EVENT_MAX; j++) for(uint32_t j = 0; j < PPM_EVENT_MAX; j++)
{ {
if(!sinsp::falco_consider_evtnum(j)) if(!sinsp::simple_comsumer_consider_evtnum(j))
{ {
std::string name = etable[j].name; std::string name = etable[j].name;
// Ignore event names NA* // Ignore event names NA*
@@ -356,7 +356,7 @@ static void print_all_ignored_events(sinsp *inspector)
for(uint32_t j = 0; j < PPM_SC_MAX; j++) for(uint32_t j = 0; j < PPM_SC_MAX; j++)
{ {
if(!sinsp::falco_consider_syscallid(j)) if(!sinsp::simple_comsumer_consider_syscallid(j))
{ {
std::string name = stable[j].name; std::string name = stable[j].name;
// Ignore event names NA* // Ignore event names NA*
@@ -904,7 +904,7 @@ int falco_init(int argc, char **argv)
if(!all_events) if(!all_events)
{ {
inspector->set_drop_event_flags(EF_DROP_FALCO); inspector->set_drop_event_flags(EF_DROP_SIMPLE_CONS);
} }
if (describe_all_rules) if (describe_all_rules)