mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-31 22:16:49 +00:00
fix(engine): apply output substitutions for all sources
Signed-off-by: Gianmatteo Palmieri <mail@gian.im>
This commit is contained in:
parent
1882def2a6
commit
d1707bef63
@ -501,10 +501,7 @@ void rule_loader::compiler::compile_rule_infos(
|
|||||||
|
|
||||||
// build rule output message
|
// build rule output message
|
||||||
rule.output = r.output;
|
rule.output = r.output;
|
||||||
if (r.source == falco_common::syscall_source)
|
apply_output_substitutions(cfg, rule.output);
|
||||||
{
|
|
||||||
apply_output_substitutions(cfg, rule.output);
|
|
||||||
}
|
|
||||||
|
|
||||||
// validate the rule's output
|
// validate the rule's output
|
||||||
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))
|
if(!is_format_valid(*cfg.sources.at(r.source), rule.output, err))
|
||||||
|
Loading…
Reference in New Issue
Block a user