Mark Stemm db0d913acc Rule updates vdec (#307) ...

* Let kubelet running loopback spawn shells

Seen by @JPLachance, thanks for the heads up!

* Let docker's "exe" broadly write to files.

As a part of some docker commands like "docker save", etc, the program
exe can write from files on the host filesystem /var/lib/docker/... to a
variety of files within the container.

Allow this via a macro exe_running_docker_save that checks the
commandline as well as the parent and use it as an exclusion for the
write below binary dir/root/etc rules.

* Let chef perform more tasks

- Let chef-client generally read sensitive files and write below /etc.
- Let python running a chef script yum-dump.py write the rpm database.

2017-12-11 22:34:50 -08:00

..

application_rules.yaml

Rule updates vnov (#300)

2017-11-16 12:12:31 -08:00

CMakeLists.txt

Rule updates vnov (#300)

2017-11-16 12:12:31 -08:00

falco_rules.local.yaml

Rework config file handling

2017-10-05 18:35:39 -07:00

falco_rules.yaml

Rule updates vdec (#307)

2017-12-11 22:34:50 -08:00