From 68cca84ba69f3ae1ea4de9d0bf020a2fd5e72e8b Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Thu, 24 Aug 2017 10:26:13 -0700 Subject: [PATCH] Also let tini spawn shells in containers. --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index bb1aa7cb..108ff2df 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -729,7 +729,7 @@ nomachine_binaries, monitoring_binaries, gitlab_binaries, initdb, pg_ctl, awk, falco, cron, erl_child_setup, ceph, PM2, pycompile, py3compile, hhvm, npm, mysql_install_d, serf, - runsv, supervisord, varnishd, crond, logrotate, x2goagent, timeout) + runsv, supervisord, varnishd, crond, logrotate, x2goagent, timeout, tini) and not trusted_containers and not shell_spawning_containers and not parent_java_running_echo