github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-10 18:42:33 +00:00
Code Issues Projects Releases Wiki Activity

Append Slash to Sensitive Mount Path startswith

Browse Source 
Make L#1932 equivalent to L#1898

Signed-off-by: Brad Geesaman <bradgeesaman+github@gmail.com>
This commit is contained in:
bgeesaman 2020-09-10 15:45:55 -04:00 committed by poiana
parent f02a998526
commit cb2439d757
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -1929,7 +1929,7 @@
condition: (user_trusted_containers or condition: (user_trusted_containers or
container.image.repository in (trusted_images) or container.image.repository in (trusted_images) or
container.image.repository in (falco_sensitive_mount_images) or container.image.repository in (falco_sensitive_mount_images) or
container.image.repository startswith quay.io/sysdig) container.image.repository startswith quay.io/sysdig/)
# These container images are allowed to run with hostnetwork=true # These container images are allowed to run with hostnetwork=true
- list: falco_hostnetwork_images - list: falco_hostnetwork_images