From f16c744779228dbcb67f487d7220478d3851cd8e Mon Sep 17 00:00:00 2001
From: kaizhe <derek0405@gmail.com>
Date: Wed, 6 Nov 2019 09:23:25 -0800
Subject: [PATCH] rules update: add hyperkube to the whitelist of rule Set
 Setuid or Setgit bit

Signed-off-by: kaizhe <derek0405@gmail.com>
---
 rules/falco_rules.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index bcbb3c16..94c3cedd 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -2436,7 +2436,7 @@
   condition: (always_true)
 
 - list: user_known_chmod_applications
-  items: []
+  items: [hyperkube]
 
 - rule: Set Setuid or Setgid bit
   desc: >