From 409ca4382ea28fd284bf2d150e0aef2f87d97667 Mon Sep 17 00:00:00 2001 From: Alessandro Brucato Date: Wed, 13 Jul 2022 10:16:44 +0200 Subject: [PATCH] Update rules/falco_rules.yaml Signed-off-by: Alessandro Brucato Co-authored-by: schie <77834235+darryk10@users.noreply.github.com> --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 7ca600de..c66fb1cb 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1761,7 +1761,7 @@ container.image.repository endswith /image-inspector)) - list: redhat_io_images_privileged - items: [registry.redhat.io/openshift-logging/fluentd-rhel8, registry.redhat.io/openshift4/ose-csi-node-driver-registrar, registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8, registry.redhat.io/openshift3/ose-service-catalog, registry.redhat.io/openshift4/ose-local-storage-diskmaker,] + items: [registry.redhat.io/openshift-logging/fluentd-rhel8, registry.redhat.io/openshift4/ose-csi-node-driver-registrar, registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8, registry.redhat.io/openshift3/ose-service-catalog, registry.redhat.io/openshift4/ose-local-storage-diskmaker] - macro: redhat_image condition: >