mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-23 21:11:50 +00:00
Related to the changes in https://github.com/draios/sysdig/pull/1501, add support for an "intersects" operator that verifies if any of the values in the rhs of an expression are found in the set of extracted values. For example: (a,b,c) in (a,b) is false, but (a,b,c) intersects (a,b) is true. The code that implements CO_INTERSECTS is in a different commit. Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
Installation
The sysdig grammar uses the lpeg parser. For now install it using luarocks:
luarocks install lpeg.