From 5acdb16e893e860197cfd4a58dd00439b1116eb9 Mon Sep 17 00:00:00 2001 From: Spencer Krum Date: Wed, 17 Jul 2019 19:16:40 -0500 Subject: [PATCH] Fix shell_procs macro Extra parentheses broke the Terminal check Co-Authored-By: Michael Ducy Signed-off-by: Spencer Krum --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index df8c12ae..67b964f3 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -111,7 +111,7 @@ items: [add-shell, remove-shell] - macro: shell_procs - condition: (proc.name in (shell_binaries)) + condition: proc.name in (shell_binaries) - list: coreutils_binaries items: [