Not sending directory deletion events

Author: JoukoVirtanen

fact/src/event/mod.rs

@@ -384,12 +384,8 @@ impl From<FileData> for fact_api::file_activity::File {
             FileData::MkDir(_) => {
                 unreachable!("MkDir event reached protobuf conversion");
             }
-            FileData::RmDir(event) => {
-                // For now, report directory deletion as unlink
-                // TODO: Filter this out like MkDir once inode tracking is stable
-                let activity = Some(fact_api::FileActivityBase::from(event));
-                let f_act = fact_api::FileUnlink { activity };
-                fact_api::file_activity::File::Unlink(f_act)
+            FileData::RmDir(_) => {
+                unreachable!("RmDir event reached protobuf conversion");
             }
             FileData::Unlink(event) => {
                 let activity = Some(fact_api::FileActivityBase::from(event));

fact/src/host_scanner.rs

@@ -295,8 +295,8 @@ impl HostScanner {
                             self.handle_unlink_event(&event);
                         }
 
-                        // Skip directory creation events - we track them internally but don't send to sensor
-                        if event.is_mkdir() {
+                        // Skip directory creation and deletion events - we track them internally but don't send to sensor
+                        if event.is_mkdir() || event.is_rmdir() {
                             continue;
                         }