mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-01 17:12:21 +00:00
commit
b04bccd1a7
@ -345,8 +345,7 @@
|
||||
container.image startswith sysdig/falco or
|
||||
container.image startswith sysdig/sysdig or
|
||||
container.image startswith gcr.io/google_containers/hyperkube or
|
||||
container.image startswith gcr.io/google_containers/kube-proxy or
|
||||
container.image startswith cchh/sysdig)
|
||||
container.image startswith gcr.io/google_containers/kube-proxy)
|
||||
|
||||
- rule: File Open by Privileged Container
|
||||
desc: Any open by a privileged container. Exceptions are made for known trusted images.
|
||||
|
Loading…
Reference in New Issue
Block a user