mirror of
https://github.com/falcosecurity/falco.git
synced 2025-06-29 08:07:24 +00:00
cleanup(falco_engine): remove unused methods
Signed-off-by: Andrea Terzolo <andreaterzolo3@gmail.com>
This commit is contained in:
parent
5ac005bd4d
commit
b318c165da
@ -157,15 +157,6 @@ void falco_engine::list_fields(std::string &source, bool verbose, bool names_onl
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
void falco_engine::load_rules(const std::string &rules_content, bool verbose, bool all_events)
|
|
||||||
{
|
|
||||||
static const std::string no_name = "N/A";
|
|
||||||
|
|
||||||
std::unique_ptr<load_result> res = load_rules(rules_content, no_name);
|
|
||||||
|
|
||||||
interpret_load_result(res, no_name, rules_content, verbose);
|
|
||||||
}
|
|
||||||
|
|
||||||
std::unique_ptr<load_result> falco_engine::load_rules(const std::string &rules_content, const std::string &name)
|
std::unique_ptr<load_result> falco_engine::load_rules(const std::string &rules_content, const std::string &name)
|
||||||
{
|
{
|
||||||
rule_loader::configuration cfg(rules_content, m_sources, name);
|
rule_loader::configuration cfg(rules_content, m_sources, name);
|
||||||
@ -237,44 +228,6 @@ std::unique_ptr<load_result> falco_engine::load_rules(const std::string &rules_c
|
|||||||
return std::move(cfg.res);
|
return std::move(cfg.res);
|
||||||
}
|
}
|
||||||
|
|
||||||
void falco_engine::load_rules_file(const std::string &rules_filename, bool verbose, bool all_events)
|
|
||||||
{
|
|
||||||
std::string rules_content;
|
|
||||||
|
|
||||||
read_file(rules_filename, rules_content);
|
|
||||||
|
|
||||||
std::unique_ptr<load_result> res = load_rules(rules_content, rules_filename);
|
|
||||||
|
|
||||||
interpret_load_result(res, rules_filename, rules_content, verbose);
|
|
||||||
}
|
|
||||||
|
|
||||||
std::unique_ptr<load_result> falco_engine::load_rules_file(const std::string &rules_filename)
|
|
||||||
{
|
|
||||||
std::string rules_content;
|
|
||||||
|
|
||||||
try {
|
|
||||||
read_file(rules_filename, rules_content);
|
|
||||||
}
|
|
||||||
catch (falco_exception &e)
|
|
||||||
{
|
|
||||||
rule_loader::context ctx(rules_filename);
|
|
||||||
|
|
||||||
std::unique_ptr<rule_loader::result> res(new rule_loader::result(rules_filename));
|
|
||||||
|
|
||||||
res->add_error(load_result::LOAD_ERR_FILE_READ, e.what(), ctx);
|
|
||||||
|
|
||||||
// Old gcc versions (e.g. 4.8.3) won't allow move elision but newer versions
|
|
||||||
// (e.g. 10.2.1) would complain about the redundant move.
|
|
||||||
#if __GNUC__ > 4
|
|
||||||
return res;
|
|
||||||
#else
|
|
||||||
return std::move(res);
|
|
||||||
#endif
|
|
||||||
}
|
|
||||||
|
|
||||||
return load_rules(rules_content, rules_filename);
|
|
||||||
}
|
|
||||||
|
|
||||||
void falco_engine::enable_rule(const std::string &substring, bool enabled, const std::string &ruleset)
|
void falco_engine::enable_rule(const std::string &substring, bool enabled, const std::string &ruleset)
|
||||||
{
|
{
|
||||||
uint16_t ruleset_id = find_ruleset_id(ruleset);
|
uint16_t ruleset_id = find_ruleset_id(ruleset);
|
||||||
@ -965,29 +918,6 @@ void falco_engine::read_file(const std::string& filename, std::string& contents)
|
|||||||
std::istreambuf_iterator<char>());
|
std::istreambuf_iterator<char>());
|
||||||
}
|
}
|
||||||
|
|
||||||
void falco_engine::interpret_load_result(std::unique_ptr<load_result>& res,
|
|
||||||
const std::string& rules_filename,
|
|
||||||
const std::string& rules_content,
|
|
||||||
bool verbose)
|
|
||||||
{
|
|
||||||
falco::load_result::rules_contents_t rc = {{rules_filename, rules_content}};
|
|
||||||
|
|
||||||
if(!res->successful())
|
|
||||||
{
|
|
||||||
// The output here is always the full e.g. "verbose" output.
|
|
||||||
throw falco_exception(res->as_string(true, rc).c_str());
|
|
||||||
}
|
|
||||||
|
|
||||||
if(verbose && res->has_warnings())
|
|
||||||
{
|
|
||||||
// Here, verbose controls whether to additionally
|
|
||||||
// "log" e.g. print to stderr. What's logged is always
|
|
||||||
// non-verbose so it fits on a single line.
|
|
||||||
// todo(jasondellaluce): introduce a logging callback in Falco
|
|
||||||
fprintf(stderr, "%s\n", res->as_string(false, rc).c_str());
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
static bool check_plugin_requirement_alternatives(
|
static bool check_plugin_requirement_alternatives(
|
||||||
const std::vector<falco_engine::plugin_version_requirement>& plugins,
|
const std::vector<falco_engine::plugin_version_requirement>& plugins,
|
||||||
const rule_loader::plugin_version_info::requirement_alternatives& alternatives,
|
const rule_loader::plugin_version_info::requirement_alternatives& alternatives,
|
||||||
|
@ -74,15 +74,8 @@ public:
|
|||||||
void list_fields(std::string &source, bool verbose, bool names_only, bool markdown) const;
|
void list_fields(std::string &source, bool verbose, bool names_only, bool markdown) const;
|
||||||
|
|
||||||
//
|
//
|
||||||
// Load rules either directly or from a filename.
|
// Load rules and returns a result object.
|
||||||
//
|
//
|
||||||
void load_rules_file(const std::string &rules_filename, bool verbose, bool all_events);
|
|
||||||
void load_rules(const std::string &rules_content, bool verbose, bool all_events);
|
|
||||||
|
|
||||||
//
|
|
||||||
// Identical to above, but returns a result object instead of
|
|
||||||
// throwing exceptions on error.
|
|
||||||
std::unique_ptr<falco::load_result> load_rules_file(const std::string &rules_filename);
|
|
||||||
std::unique_ptr<falco::load_result> load_rules(const std::string &rules_content, const std::string &name);
|
std::unique_ptr<falco::load_result> load_rules(const std::string &rules_content, const std::string &name);
|
||||||
|
|
||||||
//
|
//
|
||||||
@ -321,13 +314,6 @@ private:
|
|||||||
// Throws falco_exception if the file can not be read
|
// Throws falco_exception if the file can not be read
|
||||||
void read_file(const std::string& filename, std::string& contents);
|
void read_file(const std::string& filename, std::string& contents);
|
||||||
|
|
||||||
// For load_rules methods that throw exceptions on error,
|
|
||||||
// interpret a load_result and throw an exception if needed.
|
|
||||||
void interpret_load_result(std::unique_ptr<falco::load_result>& res,
|
|
||||||
const std::string& rules_filename,
|
|
||||||
const std::string& rules_content,
|
|
||||||
bool verbose);
|
|
||||||
|
|
||||||
indexed_vector<falco_source> m_sources;
|
indexed_vector<falco_source> m_sources;
|
||||||
|
|
||||||
inline const falco_source* find_source(std::size_t index)
|
inline const falco_source* find_source(std::size_t index)
|
||||||
@ -448,4 +434,3 @@ private:
|
|||||||
std::string m_extra;
|
std::string m_extra;
|
||||||
bool m_replace_container_info;
|
bool m_replace_container_info;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user