expose DisruptiveAction() in MatchedRules

crowdsecurity · Dec 22, 2023 · 803b08f · 803b08f
1 parent 41d5358
commit 803b08f
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/internal/corazarules/rule_match.go b/internal/corazarules/rule_match.go
@@ -74,6 +74,14 @@ var DisruptiveActionMap = map[string]DisruptiveAction{
 	"redirect": DisruptiveActionRedirect,
 }
 
+var disruptiveActionMapStr = map[DisruptiveAction]string{
+	DisruptiveActionAllow:    "allow",
+	DisruptiveActionDeny:     "deny",
+	DisruptiveActionDrop:     "drop",
+	DisruptiveActionPass:     "pass",
+	DisruptiveActionRedirect: "redirect",
+}
+
 // MatchedRule contains a list of macro expanded messages,
 // matched variables and a pointer to the rule
 type MatchedRule struct {
@@ -142,6 +150,10 @@ func (mr *MatchedRule) Rule() types.RuleMetadata {
 	return mr.Rule_
 }
 
+func (mr *MatchedRule) DisruptiveAction() string {
+	return disruptiveActionMapStr[mr.DisruptiveAction_]
+}
+
 const maxSizeLogMessage = 200
 
 func (mr MatchedRule) writeDetails(log *strings.Builder, matchData types.MatchData) {

diff --git a/types/rule_match.go b/types/rule_match.go
@@ -46,4 +46,6 @@ type MatchedRule interface {
 
 	AuditLog() string
 	ErrorLog() string
+
+	DisruptiveAction() string
 }