github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 00:22:15 +00:00
Code Issues Projects Releases Wiki Activity

cleanup(app_actions): include activated syscalls in LOG_DEBUG logs

Browse Source 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
This commit is contained in:
Melissa Kilby 2023-02-21 23:25:57 +00:00 committed by poiana
parent d6421d4e67
commit b6f6195725
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
userspace/falco/app/actions/helpers_interesting_sets.cpp
View File

@ -160,7 +160,15 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set<p
static void select_syscall_set(falco::app::state& s, const libsinsp::events::set<ppm_event_code>& rules_event_set) static void select_syscall_set(falco::app::state& s, const libsinsp::events::set<ppm_event_code>& rules_event_set)
{ {
s.selected_sc_set = libsinsp::events::event_set_to_sc_set(s.selected_event_set); s.selected_sc_set = libsinsp::events::event_set_to_sc_set(s.selected_event_set);
if (!s.selected_sc_set.empty())
{
auto selected_sc_set_names = libsinsp::events::sc_set_to_names(s.selected_sc_set);
falco_logger::log(LOG_DEBUG, "(" + std::to_string(selected_sc_set_names.size())
+ ") syscalls selected in total (final set): "
+ concat_set_in_order(selected_sc_set_names) + "\n");
}
} }
static void select_kernel_tracepoint_set(falco::app::state& s) static void select_kernel_tracepoint_set(falco::app::state& s)