github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-01 00:52:16 +00:00
Code Issues Projects Releases Wiki Activity

Add addl ruby binary when run by bundle

Browse Source
This commit is contained in:
Mark Stemm 2017-11-08 13:13:00 -08:00
parent ffed7ef63c
commit e7c2068267
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -461,7 +461,7 @@
- macro: bundle_running_ruby - macro: bundle_running_ruby
condition: > condition: >
((proc.pname=ruby or proc.pname contains ".rb") and ( ((proc.pname in (ruby,ruby2.1) or proc.pname contains ".rb") and (
proc.aname[2]=bundle or proc.aname[2]=bundle or
proc.aname[3]=bundle or proc.aname[3]=bundle or
proc.aname[4]=bundle)) proc.aname[4]=bundle))