mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-08 09:37:58 +00:00
docs(proposals/20200828-structured-exception-handling): indentation
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
This commit is contained in:
parent
b7bda6d892
commit
581d67fa08
@ -67,7 +67,7 @@ An important way to customize rules and macros is to use `append: true` to add t
|
||||
desc: Detect package repositories get updated
|
||||
condition: >
|
||||
((open_write and access_repositories) or (modify and modify_repositories))
|
||||
` and not package_mgmt_procs
|
||||
and not package_mgmt_procs
|
||||
and not exe_running_docker_save
|
||||
and not user_known_update_package_registry
|
||||
```
|
||||
@ -238,4 +238,3 @@ However, there are a few changes we'll have to make to Falco rules file parsing:
|
||||
* Similarly, Falco will reject rule objects with exception keys. We'll also probably want to change Falco to allow unknown keys inside rule/macro/list/exception objects.
|
||||
|
||||
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user