diff --git a/userspace/falco/app_actions/load_rules_files.cpp b/userspace/falco/app_actions/load_rules_files.cpp index 6a986d43..b3e697ee 100644 --- a/userspace/falco/app_actions/load_rules_files.cpp +++ b/userspace/falco/app_actions/load_rules_files.cpp @@ -22,7 +22,8 @@ using namespace falco::app; void application::check_for_ignored_events() { std::set evttypes; - sinsp_evttables* einfo = m_state->inspector->get_event_info_tables(); + std::unique_ptr inspector(new sinsp()); + sinsp_evttables* einfo = inspector->get_event_info_tables(); const struct ppm_event_info* etable = einfo->m_event_info; std::string source = falco_common::syscall_source;