mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-05 10:56:47 +00:00
tests: fix broken tests
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
parent
805f0cdd78
commit
fbac2a9570
@ -62,7 +62,7 @@ traces: !mux
|
|||||||
falco-event-generator:
|
falco-event-generator:
|
||||||
trace_file: traces-positive/falco-event-generator.scap
|
trace_file: traces-positive/falco-event-generator.scap
|
||||||
detect: True
|
detect: True
|
||||||
detect_level: [ERROR, WARNING, INFO, NOTICE, DEBUG]
|
detect_level: [ERROR, WARNING, NOTICE, DEBUG]
|
||||||
detect_counts:
|
detect_counts:
|
||||||
- "Write below binary dir": 1
|
- "Write below binary dir": 1
|
||||||
- "Read sensitive file untrusted": 3
|
- "Read sensitive file untrusted": 3
|
||||||
@ -71,7 +71,7 @@ traces: !mux
|
|||||||
- "Write below etc": 1
|
- "Write below etc": 1
|
||||||
- "System procs network activity": 1
|
- "System procs network activity": 1
|
||||||
- "Mkdir binary dirs": 1
|
- "Mkdir binary dirs": 1
|
||||||
- "System user interactive": 1
|
- "System user interactive": 0
|
||||||
- "DB program spawned process": 1
|
- "DB program spawned process": 1
|
||||||
- "Non sudo setuid": 1
|
- "Non sudo setuid": 1
|
||||||
- "Create files below dev": 1
|
- "Create files below dev": 1
|
||||||
|
Loading…
Reference in New Issue
Block a user