From a71a635b7e49ef565e0c72d458f7d59d2963ce5f Mon Sep 17 00:00:00 2001 From: Alessandro Brucato Date: Wed, 13 Jul 2022 10:16:30 +0200 Subject: [PATCH] Update rules/falco_rules.yaml Signed-off-by: Alessandro Brucato Co-authored-by: schie <77834235+darryk10@users.noreply.github.com> --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index dad57eb8..7ca600de 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1760,7 +1760,7 @@ container.image.repository endswith /prometheus-node-exporter or container.image.repository endswith /image-inspector)) -- list: redhat-io-images-privileged +- list: redhat_io_images_privileged items: [registry.redhat.io/openshift-logging/fluentd-rhel8, registry.redhat.io/openshift4/ose-csi-node-driver-registrar, registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8, registry.redhat.io/openshift3/ose-service-catalog, registry.redhat.io/openshift4/ose-local-storage-diskmaker,] - macro: redhat_image