github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-17 08:11:32 +00:00
Code Issues Projects Releases Wiki Activity

clean(rules/falco_rules.yaml): remove deprecated oci image repositories

Browse Source 
Signed-off-by: maxgio92 <massimiliano.giovagnoli.1992@gmail.com>
This commit is contained in:
maxgio92 2021-04-28 16:17:42 +02:00 committed by poiana
parent 87438ec723
commit fd6a1d0d05
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rules/falco_rules.yaml
View File

@ -1787,7 +1787,6 @@
docker.io/falcosecurity/falco, docker.io/falcosecurity/falco,
docker.io/mesosphere/mesos-slave, docker.io/mesosphere/mesos-slave,
docker.io/rook/toolbox, docker.io/rook/toolbox,
docker.io/sysdig/falco,
docker.io/sysdig/sysdig, docker.io/sysdig/sysdig,
falcosecurity/falco, falcosecurity/falco,
gcr.io/google_containers/kube-proxy, gcr.io/google_containers/kube-proxy,
@ -1801,7 +1800,6 @@
k8s.gcr.io/kube-proxy, k8s.gcr.io/kube-proxy,
k8s.gcr.io/prometheus-to-sd, k8s.gcr.io/prometheus-to-sd,
quay.io/calico/node, quay.io/calico/node,
sysdig/falco,
sysdig/sysdig, sysdig/sysdig,
sematext_images sematext_images
] ]
@ -1827,7 +1825,7 @@
# host filesystem. # host filesystem.
- list: falco_sensitive_mount_images - list: falco_sensitive_mount_images
items: [ items: [
docker.io/sysdig/falco, docker.io/sysdig/sysdig, sysdig/falco, sysdig/sysdig, docker.io/sysdig/sysdig, sysdig/sysdig,
docker.io/falcosecurity/falco, falcosecurity/falco, docker.io/falcosecurity/falco, falcosecurity/falco,
gcr.io/google_containers/hyperkube, gcr.io/google_containers/hyperkube,
gcr.io/google_containers/kube-proxy, docker.io/calico/node, gcr.io/google_containers/kube-proxy, docker.io/calico/node,
@ -2332,9 +2330,9 @@
- macro: k8s_containers - macro: k8s_containers
condition: > condition: >
(container.image.repository in (gcr.io/google_containers/hyperkube-amd64, (container.image.repository in (gcr.io/google_containers/hyperkube-amd64,
gcr.io/google_containers/kube2sky, docker.io/sysdig/falco, gcr.io/google_containers/kube2sky,
docker.io/sysdig/sysdig, docker.io/falcosecurity/falco, docker.io/sysdig/sysdig, docker.io/falcosecurity/falco,
sysdig/falco, sysdig/sysdig, falcosecurity/falco, sysdig/sysdig, falcosecurity/falco,
fluent/fluentd-kubernetes-daemonset, prom/prometheus, fluent/fluentd-kubernetes-daemonset, prom/prometheus,
ibm_cloud_containers) ibm_cloud_containers)
or (k8s.ns.name = "kube-system")) or (k8s.ns.name = "kube-system"))