github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2026-04-05 03:22:41 +00:00
Code Issues Projects Releases Wiki Activity

wip(userspace): checking module using event timestamps rather than an external timer

Browse Source 
This approach does not sound good to me since events can miss
timestamps.

Furthermore logically it is wrong to check the module sends event using
the events ...

Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
Leonardo Di Donato
2019-08-30 08:32:38 +00:00
parent 7a3d5c62a0
commit f710edcde2
3 changed files with 47 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
test/falco_test.py
View File

@@ -40,6 +40,8 @@ class FalcoTest(Test):
build_type = "debug" if build_type == "debug" else "release"
build_dir = os.path.join('/build', build_type)
if not os.path.exists(build_dir):
build_dir = '../build'
self.falcodir = self.params.get('falcodir', '/', default=os.path.join(self.basedir, build_dir))
self.stdout_is = self.params.get('stdout_is', '*', default='')