github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-19 00:19:17 +00:00
Code Issues Projects Releases Wiki Activity

Allow writes below /etc/nginx/conf.d

Browse Source 
The nginx docker hub container will write below that directory at
startup.
This commit is contained in:
Mark Stemm
2017-07-14 09:14:16 -07:00
parent de3ca31b15
commit 1221399ac5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@@ -345,7 +345,7 @@
debconf-show, rollerd, bind9.postinst, sv,
gen_resolvconf., update-ca-certi, certbot)
and not proc.pname in (sysdigcloud_binaries)
and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash)
and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash, /etc/nginx/conf.d)
and not ansible_running_python
and not python_running_denyhosts