diff --git a/userspace/engine/evttype_index_ruleset.cpp b/userspace/engine/evttype_index_ruleset.cpp index 4189b4b6..645e1408 100644 --- a/userspace/engine/evttype_index_ruleset.cpp +++ b/userspace/engine/evttype_index_ruleset.cpp @@ -171,8 +171,6 @@ void evttype_index_ruleset::add( if(rule.source == falco_common::syscall_source) { wrap->sc_codes = libsinsp::filter::ast::ppm_sc_codes(condition.get()); - // todo(jasondellaluce): once libsinsp has its fixes, optimize this - // by using libsinsp::events::ppm_set_to_event_set(wrap->sc_codes) wrap->event_codes = libsinsp::filter::ast::ppm_event_codes(condition.get()); } else diff --git a/userspace/engine/falco_engine_version.h b/userspace/engine/falco_engine_version.h index 290f3b96..62e450f8 100644 --- a/userspace/engine/falco_engine_version.h +++ b/userspace/engine/falco_engine_version.h @@ -21,4 +21,4 @@ limitations under the License. // This is the result of running "falco --list -N | sha256sum" and // represents the fields supported by this version of Falco. It's used // at build time to detect a changed set of fields. -#define FALCO_FIELDS_CHECKSUM "8c28f9cdff607c308e3ba56db36f998f20119cdd7cf3da11e53c181204077da2" +#define FALCO_FIELDS_CHECKSUM "dd438e1713ebf8abc09a2c89da77bb43ee3886ad1ba69802595a5f18e3854550"