mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-01 17:12:21 +00:00
commit
b04bccd1a7
@ -345,8 +345,7 @@
|
|||||||
container.image startswith sysdig/falco or
|
container.image startswith sysdig/falco or
|
||||||
container.image startswith sysdig/sysdig or
|
container.image startswith sysdig/sysdig or
|
||||||
container.image startswith gcr.io/google_containers/hyperkube or
|
container.image startswith gcr.io/google_containers/hyperkube or
|
||||||
container.image startswith gcr.io/google_containers/kube-proxy or
|
container.image startswith gcr.io/google_containers/kube-proxy)
|
||||||
container.image startswith cchh/sysdig)
|
|
||||||
|
|
||||||
- rule: File Open by Privileged Container
|
- rule: File Open by Privileged Container
|
||||||
desc: Any open by a privileged container. Exceptions are made for known trusted images.
|
desc: Any open by a privileged container. Exceptions are made for known trusted images.
|
||||||
|
Loading…
Reference in New Issue
Block a user