diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index a95a00e5..5f050bd3 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -194,7 +194,7 @@ items: [login_binaries, passwd_binaries, shadowutils_binaries] - list: dev_creation_binaries - items: [blkid, rename_device] + items: [blkid, rename_device, update_engine] - list: aide_wrapper_binaries items: [aide.wrapper, update-aide.con]