Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 02:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Support explicit disabling of file analyzers

Browse source
This commit is contained in:
Jon Siwek 2021-02-23 15:34:17 -08:00
parent 8c4092a0ad
commit 737d2c390b
9 changed files with 145 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

21
src/file_analysis/Component.h
View file

@ -48,8 +48,12 @@ public:
* analyzer::Tag that the manager associates with this analyzer, and
* analyzer instances can accordingly access it via analyzer::Tag().
* If not used, leave at zero.
*
* @param enabled If false the analyzer starts out as disabled and
* hence won't be used. It can still be enabled later via the
* manager, including from script-land.
*/
Component(const std::string& name, factory_function factory, Tag::subtype_t subtype = 0);
Component(const std::string& name, factory_function factory, Tag::subtype_t subtype = 0, bool enabled = true);
/**
* Destructor.
@ -69,6 +73,20 @@ public:
factory_function FactoryFunction() const
{ return factory_func; }
/**
* Returns true if the analyzer is currently enabled and hence
* available for use.
*/
bool Enabled() const { return enabled; }
/**
* Enables or disables this analyzer.
*
* @param arg_enabled True to enabled, false to disable.
*
*/
void SetEnabled(bool arg_enabled) { enabled = arg_enabled; }
protected:
/**
* Overriden from plugin::Component.
@ -79,6 +97,7 @@ private:
friend class Manager;
factory_function factory_func; // The analyzer's factory callback.
bool enabled; // True if the analyzer is enabled.
};
} // namespace zeek::file_analysis