github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-12 22:18:30 +00:00
Code Issues Projects Releases Wiki Activity

Let nsrun spawn shells in containers.

Browse Source
This commit is contained in:
Mark Stemm 2017-11-09 14:16:52 -08:00
parent d5869599f7
commit b4bd11bf70
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -1143,7 +1143,7 @@
runsv, supervisord, varnishd, crond, logrotate, timeout, tini,
xrdb, xfce4-session, weave, logdna-agent, bundle, configure, luajit, nginx,
beam.smp, paster, postfix-local, hawkular-metric, fluentd, x2gormforward,
'"[celeryd:"', flock)
'"[celeryd:"', flock, nsrun)
and not trusted_containers
and not shell_spawning_containers
and not parent_java_running_echo