Matt Moyer 36acd6dfbf Add user_known_mount_in_privileged_containers ...

This adds a new macro `user_known_mount_in_privileged_containers` which
allows the easier user-defined exclusions for the "Mount Launched in
Privileged Container" rule.

This would be cleaner with the exclusions feature, but this feature
is not used in the default ruleset yet, if I understand correctly.

Signed-off-by: Matt Moyer <mmoyer@figma.com>

2022-03-17 10:50:56 +01:00

..

application_rules.yaml

…

aws_cloudtrail_rules.yaml

rule_output(Delete Bucket Public Access Block) typo

2022-02-03 18:23:08 +01:00

CMakeLists.txt

Add initial set of Cloudtrail rules

2021-11-12 18:27:59 +01:00

falco_rules.local.yaml

…

falco_rules.yaml

Add user_known_mount_in_privileged_containers

2022-03-17 10:50:56 +01:00

k8s_audit_rules.yaml

spelling: expand

2022-03-01 16:30:24 +01:00

OWNERS

…