diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index bcbb3c16..94c3cedd 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -2436,7 +2436,7 @@ condition: (always_true) - list: user_known_chmod_applications - items: [] + items: [hyperkube] - rule: Set Setuid or Setgid bit desc: >