Mark Stemm af564f17a6 Add ability to override shell spawning binaries (#304) ...

Rename user_known_container_shell_spawn_binaries to
user_known_shell_spawn_binaries (the container distinction doesn't exist
any longer) and add it as an exception for run shell untrusted.

That way others can easily exclude shell spawning programs in a second
rules file.

2017-12-01 12:30:04 -08:00

..

application_rules.yaml

Rule updates vnov (#300)

2017-11-16 12:12:31 -08:00

CMakeLists.txt

Rule updates vnov (#300)

2017-11-16 12:12:31 -08:00

falco_rules.local.yaml

Rework config file handling

2017-10-05 18:35:39 -07:00

falco_rules.yaml

Add ability to override shell spawning binaries (#304)

2017-12-01 12:30:04 -08:00