github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-11 11:39:32 +00:00
Code Issues Projects Releases Wiki Activity

update(falco.yaml): introduce rule_matching config key

Browse Source 
Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>
This commit is contained in:
Lorenzo Susini
2023-08-02 13:17:24 +00:00
committed by poiana
parent ac3ba50e7c
commit c6abf6a133
3 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
userspace/engine/falco_common.cpp
View File

@@ -27,6 +27,11 @@ static std::vector<std::string> priority_names = {
"Debug"
};
static std::vector<std::string> rule_matching_names = {
"first",
"all"
};
bool falco_common::parse_priority(std::string v, priority_type& out)
{
for (size_t i = 0; i < priority_names.size(); i++)
@@ -79,4 +84,17 @@ std::string falco_common::format_priority(priority_type v, bool shortfmt)
throw falco_exception("Unknown priority enum value: " + std::to_string(v));
}
return out;
}
bool falco_common::parse_rule_matching(std::string v, rule_matching& out)
{
for (size_t i = 0; i < rule_matching_names.size(); i++)
{
if (!strcasecmp(v.c_str(), rule_matching_names[i].c_str()))
{
out = (rule_matching) i;
return true;
}
}
return false;
}

8
userspace/engine/falco_common.h
View File

@@ -71,4 +71,12 @@ namespace falco_common
priority_type parse_priority(std::string v);
bool format_priority(priority_type v, std::string& out, bool shortfmt=false);
std::string format_priority(priority_type v, bool shortfmt=false);
enum rule_matching
{
FIRST = 0,
ALL = 1
};
bool parse_rule_matching(std::string v, rule_matching& out);
};