Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove policy limitations #3987

Open
yanivagman opened this issue Apr 18, 2024 · 0 comments
Open

Remove policy limitations #3987

yanivagman opened this issue Apr 18, 2024 · 0 comments
Assignees
Milestone

Comments

@yanivagman
Copy link
Collaborator

yanivagman commented Apr 18, 2024

Today Tracee policies have two limitations that we need to remove:

  1. Only up to 64 policies are supported
  2. Only 1 rule of the same event type can be specified in a policy

Removing the second limitation is probably more important since it will allow a user to write rules that specify different sets of filters to the same event, thus supporting logical OR operation between the filter sets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants