Skip to content

Commit

Permalink
Modify evttype_index_ruleset to derive from indexable_ruleset
Browse files Browse the repository at this point in the history
Modify evttype_index_ruleset to derive from indexable_ruleset instead
of having its own implementation of segregating filters by ruleset
id/event type.

An evttype_index_ruleset::wrapper contains a falco rule and filter,
and run_wrappers() evaluate the filter as before, without the
segregation by ruleset id/event type.

Signed-off-by: Mark Stemm <[email protected]>
  • Loading branch information
mstemm committed Jun 13, 2024
1 parent 0a2eca9 commit ef1fe3f
Show file tree
Hide file tree
Showing 2 changed files with 53 additions and 446 deletions.
Loading

0 comments on commit ef1fe3f

Please sign in to comment.