From 6397c3a556c6e248af6fb21aa8e98083efc66f0c Mon Sep 17 00:00:00 2001
From: Mark Stemm <mark.stemm@sysdig.com>
Date: Fri, 21 Jul 2017 12:17:45 -0700
Subject: [PATCH] Add additional command line.

---
 rules/falco_rules.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 40687ed8..6e97d0c9 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -589,7 +589,8 @@
     '"sh -c stty -a 2>/dev/null"',
     '"sh -c node index.js)"',
     '"sh -c node -e \"require(''nan'')\")"',
-    '"sh -c node $NODE_DEBUG_OPTION index.js )"'
+    '"sh -c node $NODE_DEBUG_OPTION index.js )"',
+    '"sh -c crontab -l 2"'
     ]
 
 # This list allows for easy additions to the set of commands allowed