github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-30 21:55:56 +00:00
Code Issues Projects Releases Wiki Activity

fix(engine): apply output substitutions for all sources

Browse Source 
Signed-off-by: Gianmatteo Palmieri <mail@gian.im>
This commit is contained in:
Gianmatteo Palmieri 2024-03-06 17:45:37 +01:00 committed by poiana
parent 1882def2a6
commit d1707bef63
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
userspace/engine/rule_loader_compiler.cpp
View File

@ -501,10 +501,7 @@ void rule_loader::compiler::compile_rule_infos(
// build rule output message
rule.output = r.output;
if (r.source == falco_common::syscall_source)
{
apply_output_substitutions(cfg, rule.output);
}
apply_output_substitutions(cfg, rule.output);
// validate the rule's output
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))