From 9d443685ead9ac9bc945cbe382372fd696c539bc Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Mon, 1 Aug 2022 14:07:53 +0000 Subject: [PATCH] new(userspace): support `SCAP_FILTERED_EVENT` return code Signed-off-by: Andrea Terzolo --- userspace/falco/app_actions/process_events.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/userspace/falco/app_actions/process_events.cpp b/userspace/falco/app_actions/process_events.cpp index f537a2ab..977d9d53 100644 --- a/userspace/falco/app_actions/process_events.cpp +++ b/userspace/falco/app_actions/process_events.cpp @@ -123,6 +123,10 @@ application::run_result application::do_inspect(syscall_evt_drop_mgr &sdropmgr, continue; } + else if(rc == SCAP_FILTERED_EVENT) + { + continue; + } else if(rc == SCAP_EOF) { break;