mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-28 10:51:24 +00:00
fix(userspace/engine): make sure exception fields are not optional in replace mode
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
parent
1bf6a83e31
commit
e211e97e2a
@ -650,7 +650,7 @@ void rule_loader::reader::read_item(
|
||||
|
||||
if (check_update_expected(expected_keys, override_replace, "replace", "exceptions", ctx))
|
||||
{
|
||||
read_rule_exceptions(cfg, item, v.exceptions, ctx, true);
|
||||
read_rule_exceptions(cfg, item, v.exceptions, ctx, false);
|
||||
}
|
||||
|
||||
if (check_update_expected(expected_keys, override_replace, "replace", "output", ctx))
|
||||
@ -771,7 +771,7 @@ void rule_loader::reader::read_item(
|
||||
decode_optional_val(item, "warn_evttypes", v.warn_evttypes, ctx);
|
||||
decode_optional_val(item, "skip-if-unknown-filter", v.skip_if_unknown_filter, ctx);
|
||||
decode_tags(item, v.tags, ctx);
|
||||
read_rule_exceptions(cfg, item, v.exceptions, ctx, has_append_flag);
|
||||
read_rule_exceptions(cfg, item, v.exceptions, ctx, false);
|
||||
collector.define(cfg, v);
|
||||
}
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user