mirror of
https://github.com/falcosecurity/falco.git
synced 2025-09-07 17:54:07 +00:00
Updated Falco Rules (markdown)
@@ -87,7 +87,7 @@ Referring to a list inserts the list items in the macro, rule, or list. Note tha
|
|||||||
|
|
||||||
If you use multiple falco rules files, you might want to append new items to an existing list. To do that, define a list with the same name as an existing list, and add an `append: true` attribute to the list. Here's an example:
|
If you use multiple falco rules files, you might want to append new items to an existing list. To do that, define a list with the same name as an existing list, and add an `append: true` attribute to the list. Here's an example:
|
||||||
|
|
||||||
*falco_rules.yaml*
|
**falco_rules.yaml**
|
||||||
```
|
```
|
||||||
- list: my_programs
|
- list: my_programs
|
||||||
items: [ls, cat, pwd]
|
items: [ls, cat, pwd]
|
||||||
@@ -99,7 +99,7 @@ If you use multiple falco rules files, you might want to append new items to an
|
|||||||
priority: INFO
|
priority: INFO
|
||||||
```
|
```
|
||||||
|
|
||||||
*falco_rules-additional.yaml*
|
**falco_rules-additional.yaml**
|
||||||
```
|
```
|
||||||
- list: my_programs
|
- list: my_programs
|
||||||
append: true
|
append: true
|
||||||
|
Reference in New Issue
Block a user