Mark Stemm 01c9d8ba31 Let runc write to /exec.fifo ...

Sample Falco alert:

```
File below / or /root opened for writing (user=<NA>
command=runc:[1:CHILD] init parent=docker-runc-cur file=/exec.fifo
program=runc:[1:CHILD] CID1 image=<NA>)
```

This github issue provides some context:
https://github.com/opencontainers/runc/pull/1698

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2020-02-03 16:13:57 +01:00

..

application_rules.yaml

update: license headers

2019-10-08 16:02:26 +02:00

CMakeLists.txt

build: include GNUInstallDirs module

2020-01-17 19:09:31 +01:00

falco_rules.local.yaml

update: license headers

2019-10-08 16:02:26 +02:00

falco_rules.yaml

Let runc write to /exec.fifo

2020-02-03 16:13:57 +01:00

k8s_audit_rules.yaml

rule update: align sensitive mount macro between k8s_audit rules and syscall rules

2019-12-03 12:58:21 -08:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00