From 09e1604fe01e10c9a830f34a93c44f5c768af999 Mon Sep 17 00:00:00 2001 From: Kaizhe Huang Date: Sat, 22 May 2021 00:19:02 +0000 Subject: [PATCH] rule update(Debugfs Launched in Privileged Container): fix typo in description Signed-off-by: Kaizhe Huang --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 9e601745..9484c2e3 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -3031,7 +3031,7 @@ tags: [filesystem, mitre_privilege_escalation] - rule: Debugfs Launched in Privileged Container - desc: Detect file system debugger debugfs launched inside a privilegd container which might lead to container escape. + desc: Detect file system debugger debugfs launched inside a privileged container which might lead to container escape. condition: > spawned_process and container and container.privileged=true