From fa7fab525fef334a2746652c487b1aecd763ebb3 Mon Sep 17 00:00:00 2001 From: Josh Soref Date: Thu, 24 Feb 2022 01:47:58 -0500 Subject: [PATCH] spelling: command lines Signed-off-by: Josh Soref --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index b7648843..2281a989 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -2255,7 +2255,7 @@ activity by any programs that can manage users, passwords, or permissions. sudo and su are excluded. Activity in containers is also excluded--some containers create custom users on top of a base linux distribution at startup. - Some innocuous commandlines that don't actually change anything are excluded. + Some innocuous command lines that don't actually change anything are excluded. condition: > spawned_process and proc.name in (user_mgmt_binaries) and not proc.name in (su, sudo, lastlog, nologin, unix_chkpwd) and not container and