github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 08:32:12 +00:00
Code Issues Projects Releases Wiki Activity

chore(userspace/falco): apply review suggestions

Browse Source 
Co-authored-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
Jason Dellaluce 2023-02-24 16:44:23 +00:00 committed by poiana
parent 3ab7c7d753
commit 61a7f32982
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
userspace/falco/app/actions/configure_interesting_sets.cpp
View File

@ -67,7 +67,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set<p
if (!rules_sc_set.empty()) if (!rules_sc_set.empty())
{ {
falco_logger::log(LOG_DEBUG, "(" + std::to_string(rules_names.size()) falco_logger::log(LOG_DEBUG, "(" + std::to_string(rules_names.size())
+ ") events in rules: " + concat_set_in_order(rules_names) + "\n"); + ") syscalls in rules: " + concat_set_in_order(rules_names) + "\n");
} }
/* DEFAULT OPTION: /* DEFAULT OPTION:
@ -94,7 +94,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set<p
// user overrides base event set // user overrides base event set
base_sc_set = user_positive_sc_set; base_sc_set = user_positive_sc_set;
// we re-transform from events set to names to make // we re-transform from sc_set to names to make
// sure that bad user inputs are ignored // sure that bad user inputs are ignored
auto user_positive_sc_set_names = libsinsp::events::sc_set_to_names(user_positive_sc_set); auto user_positive_sc_set_names = libsinsp::events::sc_set_to_names(user_positive_sc_set);
falco_logger::log(LOG_DEBUG, "+(" + std::to_string(user_positive_sc_set_names.size()) falco_logger::log(LOG_DEBUG, "+(" + std::to_string(user_positive_sc_set_names.size())
@ -111,7 +111,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set<p
/* Remove negative base_syscalls events. */ /* Remove negative base_syscalls events. */
s.selected_sc_set = s.selected_sc_set.diff(user_negative_sc_set); s.selected_sc_set = s.selected_sc_set.diff(user_negative_sc_set);
// we re-transform from events set to names to make // we re-transform from sc_set to names to make
// sure that bad user inputs are ignored // sure that bad user inputs are ignored
auto user_negative_sc_set_names = libsinsp::events::sc_set_to_names(user_negative_sc_set); auto user_negative_sc_set_names = libsinsp::events::sc_set_to_names(user_negative_sc_set);
falco_logger::log(LOG_DEBUG, "-(" + std::to_string(user_negative_sc_set_names.size()) falco_logger::log(LOG_DEBUG, "-(" + std::to_string(user_negative_sc_set_names.size())