github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-20 09:27:47 +00:00
Code Issues Projects Releases Wiki Activity

chore(userspace/falco): polish ignored event warning message

Browse Source 
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
Jason Dellaluce
2022-10-11 14:55:24 +00:00
committed by poiana
parent a4218a4b4f
commit f684e144be
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
userspace/falco/app_actions/load_rules_files.cpp
View File

@@ -59,13 +59,15 @@ void application::check_for_ignored_events()
} }
/* Get the names of the ignored events and print them. */ /* Get the names of the ignored events and print them. */
std::cerr << std::endl << "Rules match ignored syscall: warning (ignored-evttype):" << std::endl; std::cerr << "Rules match ignored syscall: warning (ignored-evttype):" << std::endl;
std::cerr << "Loaded rules match the following events:" << std::endl; std::cerr << "Loaded rules match the following events: ";
bool first = true;
for(const auto& it : event_names) for(const auto& it : event_names)
{ {
std::cerr << "\t- " << it.c_str() << std::endl; std::cerr << (first ? "" : ", ") << it.c_str();
first = false;
} }
std::cerr << "But these events are not returned unless running falco with -A" << std::endl << std::endl; std::cerr << std::endl << "But these events are not returned unless running falco with -A" << std::endl;
} }
application::run_result application::load_rules_files() application::run_result application::load_rules_files()