Add apt and apt-get as trusted binaries to spawn shells

[jcoetzee]

Periodically both apt and apt-get will spawn shells to update success timestamps and motd.

Warning Shell spawned by untrusted binary (user=root shell=sh parent=apt-get cmdline=sh -c touch /var/lib/apt/periodic/update-success-stamp 2>/dev/null || true) container=host (id=host)
Warning Shell spawned by untrusted binary (user=root shell=sh parent=apt-get cmdline=sh -c /usr/lib/update-notifier/update-motd-updates-available 2>/dev/null || true) container=host (id=host)
Warning Shell spawned by untrusted binary (user=root shell=sh parent=apt cmdline=sh -c touch /var/lib/apt/periodic/update-success-stamp 2>/dev/null || true) container=host (id=host)
Warning Shell spawned by untrusted binary (user=root shell=sh parent=apt cmdline=sh -c /usr/lib/update-notifier/update-motd-updates-available 2>/dev/null || true) container=host (id=host)

falco-CLA-1.0-signed-off-by: Jonathan Coetzee jon@thancoetzee.com

[mstemm]

Looks good, thanks!