mirror of
https://github.com/falcosecurity/falco.git
synced 2026-03-24 21:52:15 +00:00
* Proactively enable rules instead of only disabling Previously, rules were enabled by default. Some performance improvements in https://github.com/draios/sysdig/pull/1126 broke this, requiring that each rule is explicitly enabled or disabled for a given ruleset. So if enabled is true, explicitly enable the rule for the default ruleset. * Get rid of shadowed res variable. It was used both for the inspector loop and the falco result.
Installation
The sysdig grammar uses the lpeg parser. For now install it using luarocks:
luarocks install lpeg.