github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-23 10:57:59 +00:00
Code Issues Projects Releases Wiki Activity

Add containerd related flags (#585)

Browse Source 
Signed-off-by: Spencer Krum <nibz@spencerkrum.com>

sysdig-CLA-1.0-contributing-entity: International Business Machines
sysdig-CLA-1.0-signed-off-by: Spencer Krum <skrum@us.ibm.com>
This commit is contained in:
Spencer Krum
2019-04-26 10:31:28 -05:00
committed by Mark Stemm
parent 05bb4a84ca
commit 6572423544
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
userspace/falco/falco.cpp
View File

@@ -84,6 +84,8 @@ static void usage()
" -A Monitor all events, including those with EF_DROP_FALCO flag.\n" " -A Monitor all events, including those with EF_DROP_FALCO flag.\n"
" -b, --print-base64 Print data buffers in base64. This is useful for encoding\n" " -b, --print-base64 Print data buffers in base64. This is useful for encoding\n"
" binary data that needs to be used over media designed to\n" " binary data that needs to be used over media designed to\n"
" --cri <path> Path to CRI socket for container meatadata\n"
" Use the specified socket to fetch data from a CRI-compatible runtime\n"
" -d, --daemon Run as a daemon\n" " -d, --daemon Run as a daemon\n"
" -D <pattern> Disable any rules matching the regex <pattern>. Can be specified multiple times.\n" " -D <pattern> Disable any rules matching the regex <pattern>. Can be specified multiple times.\n"
" Can not be specified with -t.\n" " Can not be specified with -t.\n"
@@ -425,6 +427,7 @@ int falco_init(int argc, char **argv)
bool list_flds = false; bool list_flds = false;
string list_flds_source = ""; string list_flds_source = "";
bool print_support = false; bool print_support = false;
string cri_socket_path;
// Used for writing trace files // Used for writing trace files
int duration_seconds = 0; int duration_seconds = 0;
@@ -604,6 +607,10 @@ int falco_init(int argc, char **argv)
printf("falco version %s\n", FALCO_VERSION); printf("falco version %s\n", FALCO_VERSION);
return EXIT_SUCCESS; return EXIT_SUCCESS;
} }
else if (string(long_options[long_index].name) == "cri")
{
cri_socket_path = optarg;
}
else if (string(long_options[long_index].name) == "list") else if (string(long_options[long_index].name) == "list")
{ {
list_flds = true; list_flds = true;
@@ -631,6 +638,12 @@ int falco_init(int argc, char **argv)
inspector = new sinsp(); inspector = new sinsp();
inspector->set_buffer_format(event_buffer_format); inspector->set_buffer_format(event_buffer_format);
// If required, set the CRI path
if(!cri_socket_path.empty())
{
inspector->set_cri_socket_path(cri_socket_path);
}
// //
// If required, set the snaplen // If required, set the snaplen
// //