Mark Stemm 9075eea62f Falco engine support for plugins ...

Mostly plugins are just handled as a new filter/formatter factory with
a new source based on the loaded input plugin, but there are a few
changes at the engine level:

- is_source_valid returns whether a filter/formatter factory exists
  for a given source. Will be used by rules loaded to skip rules for
  an unknown source.

- the falco engine now holds the required_plugin_version predicates
  found in rules files and a method is_plugin_compatible returns whether
  a plugin semver is compatible with the predicates in the rules

- Update the falco engine version and fields checksum for plugins

Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
Co-authored-by: Loris Degioanni <loris@sysdig.com>
Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2021-11-12 18:27:59 +01:00

..

lua

update(userspace/engine): support jsonpointer escaping in rule parser

2021-11-11 18:36:21 +01:00

banned.h

feat(userspace): Add BAN_ALTERNATIVE macro to banned.h.

2020-02-13 18:01:39 +01:00

CMakeLists.txt

Finish moving token bucket impl from falco to libs

2021-11-12 18:27:59 +01:00

config_falco_engine.h.in

update: license headers

2019-10-08 16:02:26 +02:00

falco_common.cpp

Use factories to provide filters/formatting

2021-10-12 17:59:38 +02:00

falco_common.h

Use factories to provide filters/formatting

2021-10-12 17:59:38 +02:00

falco_engine_version.h

Falco engine support for plugins

2021-11-12 18:27:59 +01:00

falco_engine.cpp

Falco engine support for plugins

2021-11-12 18:27:59 +01:00

falco_engine.h

Falco engine support for plugins

2021-11-12 18:27:59 +01:00

falco_utils.cpp

new: hardware_concurrency helper

2020-07-07 13:42:09 +02:00

falco_utils.h

new(userspace/engine): likely/unlikely macros in utils

2021-04-19 16:56:53 +02:00

formats.cpp

falco_formats only formats events now, no lua bindings

2021-10-12 17:59:38 +02:00

formats.h

falco_formats only formats events now, no lua bindings

2021-10-12 17:59:38 +02:00

json_evt.cpp

Make json_event_formatter a gen_event_formatter

2021-10-12 17:59:38 +02:00

json_evt.h

Make json_event_formatter a gen_event_formatter

2021-10-12 17:59:38 +02:00

lpeg.h

update: license headers

2019-10-08 16:02:26 +02:00

lyaml.h

update: license headers

2019-10-08 16:02:26 +02:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00

rules.cpp

Add ability to check if field is defined

2021-10-12 17:59:38 +02:00

rules.h

Add ability to check if field is defined

2021-10-12 17:59:38 +02:00

ruleset.cpp

Don't track event "tags" i.e. event types in rulesets

2021-10-12 17:59:38 +02:00

ruleset.h

Don't track event "tags" i.e. event types in rulesets

2021-10-12 17:59:38 +02:00