fix(engine): apply output substitutions for all sources

Signed-off-by: Gianmatteo Palmieri <mail@gian.im>
This commit is contained in:
Gianmatteo Palmieri 2024-03-06 17:45:37 +01:00 committed by poiana
parent 1882def2a6
commit d1707bef63

View File

@ -501,10 +501,7 @@ void rule_loader::compiler::compile_rule_infos(
// build rule output message // build rule output message
rule.output = r.output; rule.output = r.output;
if (r.source == falco_common::syscall_source) apply_output_substitutions(cfg, rule.output);
{
apply_output_substitutions(cfg, rule.output);
}
// validate the rule's output // validate the rule's output
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err)) if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))