diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 165bbf03..d1af1b91 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -365,7 +365,7 @@ logrotate, ansible, less, adduser, pycompile, py3compile, pyclean, py3clean, pip, pip2, ansible-playboo, man-db, init, pluto, mkinitramfs, unattended-upgr, watch, sysdig, - landscape-sysin, nessusd, PM2, syslog-summary + landscape-sysin, nessusd, PM2, syslog-summary, erl_child_setup ] - rule: Run shell untrusted