github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-26 12:48:51 +00:00
Code Issues Projects Releases Wiki Activity

fix: update rule description

Browse Source 
Signed-off-by: stevenshuang <stevenshuang521@gmail.com>
This commit is contained in:
stevenshuang
2021-03-23 17:06:22 +08:00
committed by poiana
parent 1ded30f173
commit 167c5bc691
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@@ -830,7 +830,7 @@
condition: (never_true) condition: (never_true)
- rule: Write below monitored dir - rule: Write below monitored dir
desc: an attempt to write to any file below a set of binary directories desc: an attempt to write to any file below a set of monitored directories
condition: > condition: >
evt.dir = < and open_write and monitored_dir evt.dir = < and open_write and monitored_dir
and not exe_running_docker_save and not exe_running_docker_save