github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-11 19:12:12 +00:00
Code Issues Projects Releases Wiki Activity

exclude oc on writing below root (#567)

Browse Source 
* exclude oc on writing below root

* minor changes
This commit is contained in:
Kaizhe Huang 2019-03-29 10:07:05 -07:00 committed by GitHub
parent 2fd90bf6a7
commit 9e26117e93
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -710,7 +710,7 @@
condition: (proc.name=chef-client and fd.name startswith /root/.chef) condition: (proc.name=chef-client and fd.name startswith /root/.chef)
- macro: kubectl_writing_state - macro: kubectl_writing_state
condition: (proc.name=kubectl and fd.name startswith /root/.kube) condition: (proc.name in (kubectl,oc) and fd.name startswith /root/.kube)
- macro: java_running_cassandra - macro: java_running_cassandra
condition: (proc.name=java and proc.cmdline contains "cassandra.jar") condition: (proc.name=java and proc.cmdline contains "cassandra.jar")