github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-09 18:17:57 +00:00
Code Issues Projects Releases Wiki Activity

Add addl npm cmdlines.

Browse Source
This commit is contained in:
Mark Stemm 2017-11-07 11:18:33 -08:00
parent 24fb84df60
commit 33faa911d7
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rules/falco_rules.yaml
View File

@ -448,6 +448,7 @@
- macro: parent_node_running_npm - macro: parent_node_running_npm
condition: (proc.pcmdline startswith "node /usr/local/bin/npm" or condition: (proc.pcmdline startswith "node /usr/local/bin/npm" or
proc.pcmdline startswith "node /usr/local/nodejs/bin/npm" or
proc.pcmdline startswith "node /opt/rh/rh-nodejs6/root/usr/bin/npm") proc.pcmdline startswith "node /opt/rh/rh-nodejs6/root/usr/bin/npm")
- macro: parent_nginx_running_serf - macro: parent_nginx_running_serf