mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 19:44:57 +00:00
eecc92736b
Add new unit tests to check that list substitution is working as expected, with test cases for the list substitution occurring at the beginning, middle, and end of a condition. Also add tests that verify that overrides on list/macro/rule names always occur in order.
9 lines
176 B
YAML
9 lines
176 B
YAML
- list: my_list
|
|
items: ['"one string"']
|
|
|
|
- rule: my_rule
|
|
desc: my description
|
|
condition: evt.type=open and fd.name in (file_my_list)
|
|
output: my output
|
|
priority: INFO
|