github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-03 23:55:06 +00:00
Code Issues Projects Releases Wiki Activity

refactor(userspace/engine): update rule loader to use new filter_ruleset interface

Browse Source 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
Jason Dellaluce
2022-04-14 14:12:27 +00:00
committed by poiana
parent f41f51f736
commit 50c2aa9c81
5 changed files with 57 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
userspace/engine/falco_engine.cpp
View File

@@ -169,7 +169,7 @@ void falco_engine::load_rules(const string &rules_content, bool verbose, bool al
void falco_engine::load_rules(const string &rules_content, bool verbose, bool all_events, uint64_t &required_engine_version)
{
rule_loader::configuration cfg(rules_content);
cfg.engine = this;
cfg.sources = m_sources;
cfg.min_priority = m_min_priority;
cfg.output_extra = m_extra;
cfg.replace_output_container_info = m_replace_container_info;
@@ -179,7 +179,10 @@ void falco_engine::load_rules(const string &rules_content, bool verbose, bool al
bool success = reader.load(cfg, m_rule_loader);
if (success)
{
clear_filters();
for (auto &s : m_sources)
{
s.ruleset->clear();
}
m_rules.clear();
success = m_rule_loader.compile(cfg, m_rules);
}