mirror of
https://github.com/falcosecurity/falco.git
synced 2026-03-20 03:32:09 +00:00
8497f25a43
Define a falco_load_result abstract class for use in new load_rules methods. It's abstract so the implementation details in rule_loader/rule_reader can be hidden from someone who wants to use the API to load rules and work with a result. The class defines a set of error codes/warning codes and has static methods to get a short and long description of each error/warning. There are virtual methods to access the important parts of a result: - successful or not - a string representation of the result, suitable for display to users. Takes a verbose argument. When verbose is true, the string is multi-line and has full details, including locations, item names, etc. When verbose is false, the string is single-line and just returns error codes. - a json representation of the result, suitable for automated parsing/interpretation later. Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
60 lines
1.8 KiB
CMake
60 lines
1.8 KiB
CMake
#
|
|
# Copyright (C) 2019 The Falco Authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
|
|
# the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations under the License.
|
|
|
|
set(FALCO_ENGINE_SOURCE_FILES
|
|
falco_common.cpp
|
|
falco_engine.cpp
|
|
falco_load_result.cpp
|
|
falco_utils.cpp
|
|
json_evt.cpp
|
|
evttype_index_ruleset.cpp
|
|
formats.cpp
|
|
filter_macro_resolver.cpp
|
|
filter_evttype_resolver.cpp
|
|
filter_warning_resolver.cpp
|
|
rule_loader.cpp
|
|
rule_reader.cpp
|
|
stats_manager.cpp)
|
|
|
|
add_library(falco_engine STATIC ${FALCO_ENGINE_SOURCE_FILES})
|
|
add_dependencies(falco_engine njson string-view-lite)
|
|
|
|
if(USE_BUNDLED_DEPS)
|
|
add_dependencies(falco_engine yamlcpp)
|
|
endif()
|
|
|
|
if(MINIMAL_BUILD)
|
|
target_include_directories(
|
|
falco_engine
|
|
PUBLIC
|
|
"${NJSON_INCLUDE}"
|
|
"${TBB_INCLUDE_DIR}"
|
|
"${STRING_VIEW_LITE_INCLUDE}"
|
|
"${LIBSCAP_INCLUDE_DIRS}"
|
|
"${LIBSINSP_INCLUDE_DIRS}"
|
|
"${YAMLCPP_INCLUDE_DIR}"
|
|
"${PROJECT_BINARY_DIR}/userspace/engine")
|
|
else()
|
|
target_include_directories(
|
|
falco_engine
|
|
PUBLIC
|
|
"${NJSON_INCLUDE}"
|
|
"${TBB_INCLUDE_DIR}"
|
|
"${STRING_VIEW_LITE_INCLUDE}"
|
|
"${LIBSCAP_INCLUDE_DIRS}"
|
|
"${LIBSINSP_INCLUDE_DIRS}"
|
|
"${YAMLCPP_INCLUDE_DIR}"
|
|
"${PROJECT_BINARY_DIR}/userspace/engine")
|
|
endif()
|
|
|
|
target_link_libraries(falco_engine "${FALCO_SINSP_LIBRARY}" "${YAMLCPP_LIB}")
|