github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-14 14:00:21 +00:00
Code Issues Projects Releases Wiki Activity

Be more flexible about perl Makefile.PL

Browse Source 
Allow the command line to start with that command.
This commit is contained in:
Mark Stemm
2017-11-09 14:10:35 -08:00
parent 43f7ee00fb
commit e3ef7a2ed4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@@ -443,7 +443,7 @@
proc.pcmdline startswith "node /opt/yarn/bin/yarn.js")) proc.pcmdline startswith "node /opt/yarn/bin/yarn.js"))
- macro: makefile_perl - macro: makefile_perl
condition: (proc.pcmdline="perl Makefile.PL") condition: (proc.pcmdline startswith "perl Makefile.PL")
- macro: parent_node_running_npm - macro: parent_node_running_npm
condition: (proc.pcmdline startswith "node /usr/local/bin/npm" or condition: (proc.pcmdline startswith "node /usr/local/bin/npm" or