mirror of
https://github.com/falcosecurity/falco.git
synced 2026-01-30 06:00:00 +00:00
* Also check evt.abspath in "Modify binary dirs" rule For unlinkat evt.arg[1] is not the path of the file/dir removed. * Monitor renameat too in "Modify binary dirs" rule