mirror of
https://github.com/falcosecurity/falco.git
synced 2025-09-06 01:00:36 +00:00
Updated Falco Rules (markdown)
@@ -87,7 +87,7 @@ Referring to a list inserts the list items in the macro, rule, or list. Note tha
|
||||
|
||||
If you use multiple falco rules files, you might want to append new items to an existing list. To do that, define a list with the same name as an existing list, and add an `append: true` attribute to the list. Here's an example:
|
||||
|
||||
*falco_rules.yaml*
|
||||
**falco_rules.yaml**
|
||||
```
|
||||
- list: my_programs
|
||||
items: [ls, cat, pwd]
|
||||
@@ -99,7 +99,7 @@ If you use multiple falco rules files, you might want to append new items to an
|
||||
priority: INFO
|
||||
```
|
||||
|
||||
*falco_rules-additional.yaml*
|
||||
**falco_rules-additional.yaml**
|
||||
```
|
||||
- list: my_programs
|
||||
append: true
|
||||
|
Reference in New Issue
Block a user