From 606af16f276b0758a87d7992217f1ef886635f20 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Fri, 25 Aug 2017 08:16:21 -0700 Subject: [PATCH] Let updatedb.findut spawn shells. --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index f29dc6e2..e897ef0d 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -573,7 +573,7 @@ landscape-sysin, nessusd, PM2, syslog-summary, erl_child_setup, npm, cloud-init, toybox, ceph, hhvm, certbot, mysql_install_d, serf, a2enmod, runsv, supervisord, varnishd, authconfig, tini, - timeout + timeout, updatedb.findut ] - rule: Run shell untrusted