github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-01 22:58:12 +00:00
Code Issues Projects Releases Wiki Activity

feat(userspace): open the event source/s depending on the flags

Browse Source 
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Lorenzo Fonanta <lo@linux.com>
This commit is contained in:
Leonardo Di Donato
2019-08-21 09:50:12 +00:00
committed by Lorenzo Fontana
parent 1eeb059e10
commit 49c4ef5d8c
1 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
userspace/falco/falco.cpp
View File

@@ -1050,9 +1050,28 @@ int falco_init(int argc, char **argv)
} }
else else
{ {
open_t open_cb = [](sinsp* inspector) {
inspector->open();
};
open_t open_nodriver_cb = [](sinsp* inspector) {
inspector->open_nodriver();
};
open_t open_f;
// Default mode: both event sources enabled
if (!disable_syscall && !disable_k8s_audit) {
open_f = open_cb;
}
if (disable_syscall) {
open_f = open_nodriver_cb;
}
if (disable_k8s_audit) {
open_f = open_cb;
}
try try
{ {
inspector->open(200); open_f(inspector);
} }
catch(sinsp_exception &e) catch(sinsp_exception &e)
{ {
@@ -1060,7 +1079,7 @@ int falco_init(int argc, char **argv)
{ {
falco_logger::log(LOG_ERR, "Unable to load the driver. Exiting.\n"); falco_logger::log(LOG_ERR, "Unable to load the driver. Exiting.\n");
} }
inspector->open(); open_f(inspector);
} }
} }