Skip to content

Commit

Permalink
Also let postgres run wal-e wrt shells
Browse files Browse the repository at this point in the history
Previously added as an exception for db program spawned process, need to
add as an exception for run shell untrusted.
  • Loading branch information
mstemm committed Jan 18, 2018
1 parent aee0da7 commit 07e3cf9
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions rules/falco_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1129,6 +1129,7 @@
and not run_by_foreman
and not python_mesos_marathon_scripting
and not splunk_running_forwarder
and not postgres_running_wal_e
and not user_shell_container_exclusions
output: >
Shell spawned by untrusted binary (user=%user.name shell=%proc.name parent=%proc.pname
Expand Down

0 comments on commit 07e3cf9

Please sign in to comment.