From c603055acf48c9525ebba4ba731d041f91bed878 Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Fri, 19 May 2023 08:57:21 +0000 Subject: [PATCH] fix(userspace/engine): don't count async event for evttype warning Co-authored-by: Grzegorz Nosek Signed-off-by: Jason Dellaluce --- userspace/engine/rule_loader_compiler.cpp | 1 - 1 file changed, 1 deletion(-) diff --git a/userspace/engine/rule_loader_compiler.cpp b/userspace/engine/rule_loader_compiler.cpp index d6fc5ac3..6be6b219 100644 --- a/userspace/engine/rule_loader_compiler.cpp +++ b/userspace/engine/rule_loader_compiler.cpp @@ -498,7 +498,6 @@ void rule_loader::compiler::compile_rule_infos( if(rule.source == falco_common::syscall_source) { auto evttypes = libsinsp::filter::ast::ppm_event_codes(ast.get()); - evttypes.insert(ppm_event_code::PPME_ASYNCEVENT_E); if ((evttypes.empty() || evttypes.size() > 100) && r.warn_evttypes) { cfg.res->add_warning(