mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-07 09:13:57 +00:00
test: update a comment
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
parent
9d443685ea
commit
6b7be38e41
@ -75,8 +75,7 @@ TEST_CASE("Should find event types from filter", "[rule_loader]")
|
|||||||
set<uint16_t> no_events;
|
set<uint16_t> no_events;
|
||||||
for(uint32_t i = 2; i < PPM_EVENT_MAX; i++)
|
for(uint32_t i = 2; i < PPM_EVENT_MAX; i++)
|
||||||
{
|
{
|
||||||
// Skip "old" event versions that have been replaced
|
// Skip events that are unused.
|
||||||
// by newer event versions, or events that are unused.
|
|
||||||
if(g_infotables.m_event_info[i].flags & EF_UNUSED)
|
if(g_infotables.m_event_info[i].flags & EF_UNUSED)
|
||||||
{
|
{
|
||||||
continue;
|
continue;
|
||||||
@ -233,4 +232,4 @@ TEST_CASE("Should find event types from filter", "[rule_loader]")
|
|||||||
auto f = compile("not (not evt.type=openat)");
|
auto f = compile("not (not evt.type=openat)");
|
||||||
compare_evttypes(f, openat_only);
|
compare_evttypes(f, openat_only);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user