From 9fd10220a569436ea06eb02e7072ca4138ba01ac Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Mon, 23 May 2022 13:50:24 +0000 Subject: [PATCH] update(userspace/falco): sync falco with new engine definitions Signed-off-by: Jason Dellaluce --- userspace/falco/app_actions/load_rules_files.cpp | 3 --- userspace/falco/app_actions/open_inspector.cpp | 3 +++ 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/userspace/falco/app_actions/load_rules_files.cpp b/userspace/falco/app_actions/load_rules_files.cpp index 83a338b1..68576eeb 100644 --- a/userspace/falco/app_actions/load_rules_files.cpp +++ b/userspace/falco/app_actions/load_rules_files.cpp @@ -123,9 +123,6 @@ application::run_result application::load_rules_files() return run_result::fatal(plugin_vers_err); } - // Free-up memory for the rule loader, which is not used from now on - m_state->engine->clear_loader(); - for (const auto& substring : m_options.disabled_rule_substrings) { falco_logger::log(LOG_INFO, "Disabling rules matching substring: " + substring + "\n"); diff --git a/userspace/falco/app_actions/open_inspector.cpp b/userspace/falco/app_actions/open_inspector.cpp index bbb2e20b..0f9aa85d 100644 --- a/userspace/falco/app_actions/open_inspector.cpp +++ b/userspace/falco/app_actions/open_inspector.cpp @@ -26,6 +26,9 @@ typedef std::function inspector)> open_t; application::run_result application::open_inspector() { + // Notify engine that we finished loading and enabling all rules + m_state->engine->complete_rule_loading(); + if(is_capture_mode()) { // Try to open the trace file as a