diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 166985f0..21d34be2 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -3220,7 +3220,7 @@ # falco_rules.local.yaml. - list: known_binaries_to_read_environment_variables_from_proc_files - items: [scsi_id] + items: [scsi_id, argoexec] - rule: Read environment variable from /proc files desc: An attempt to read process environment variables from /proc files