github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-31 06:10:45 +00:00
Code Issues Projects Releases Wiki Activity

feat(userspace): open the event source/s depending on the flags

Browse Source 
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Lorenzo Fonanta <lo@linux.com>
This commit is contained in:
Leonardo Di Donato
2019-08-21 09:50:12 +00:00
committed by Lorenzo Fontana
parent 1eeb059e10
commit 49c4ef5d8c
1 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
userspace/falco/falco.cpp
View File

@@ -1050,9 +1050,28 @@ int falco_init(int argc, char **argv)
}
else
{
open_t open_cb = [](sinsp* inspector) {
inspector->open();
};
open_t open_nodriver_cb = [](sinsp* inspector) {
inspector->open_nodriver();
};
open_t open_f;
// Default mode: both event sources enabled
if (!disable_syscall && !disable_k8s_audit) {
open_f = open_cb;
}
if (disable_syscall) {
open_f = open_nodriver_cb;
}
if (disable_k8s_audit) {
open_f = open_cb;
}
try
{
inspector->open(200);
open_f(inspector);
}
catch(sinsp_exception &e)
{
@@ -1060,7 +1079,7 @@ int falco_init(int argc, char **argv)
{
falco_logger::log(LOG_ERR, "Unable to load the driver. Exiting.\n");
}
inspector->open();
open_f(inspector);
}
}