From ca3c4814fea9593ec55e018d152941c4dd2b5658 Mon Sep 17 00:00:00 2001 From: kaizhe Date: Tue, 11 Aug 2020 14:19:10 -0700 Subject: [PATCH] add sematext images back Signed-off-by: kaizhe --- rules/falco_rules.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 164222d2..80017226 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1834,7 +1834,10 @@ condition: (never_true) - list: sematext_images - items: [] + items: [docker.io/sematext/sematext-agent-docker, docker.io/sematext/agent, docker.io/sematext/logagent, + registry.access.redhat.com/sematext/sematext-agent-docker, + registry.access.redhat.com/sematext/agent, + registry.access.redhat.com/sematext/logagent] # These container images are allowed to run with --privileged - list: falco_privileged_images