github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-10-22 03:49:36 +00:00
Code Issues Projects Releases Wiki Activity

More x-related shell spawners

Browse Source 
Add additional x-related shell spawning programs.
This commit is contained in:
Mark Stemm
2017-08-24 14:14:11 -07:00
parent b0cf038e1d
commit 6aa2373acd
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
rules/falco_rules.yaml
View File

@@ -738,7 +738,8 @@
nomachine_binaries,
monitoring_binaries, gitlab_binaries, initdb, pg_ctl, awk, falco, cron,
erl_child_setup, ceph, PM2, pycompile, py3compile, hhvm, npm, mysql_install_d, serf,
runsv, supervisord, varnishd, crond, logrotate, x2goagent, timeout, tini)
runsv, supervisord, varnishd, crond, logrotate, x2goagent, timeout, tini,
xrdb, xfce4-session)
and not trusted_containers
and not shell_spawning_containers
and not parent_java_running_echo