Skip to content

Commit

Permalink
rule(list package_mgmt_binaries): add snapd to list
Browse files Browse the repository at this point in the history
Snap is a package manager by Canonical which was not in the
`package_mgmt_binaries` list.

Signed-off-by: Nicolas Marier <nmarier@coveo.com>
  • Loading branch information
Nicolas Marier authored and poiana committed Jul 10, 2020
1 parent de14744 commit 32bae35
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rules/falco_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -232,7 +232,7 @@
# The truncated dpkg-preconfigu is intentional, process names are
# truncated at the sysdig level.
- list: package_mgmt_binaries
items: [rpm_binaries, deb_binaries, update-alternat, gem, pip, pip3, sane-utils.post, alternatives, chef-client, apk]
items: [rpm_binaries, deb_binaries, update-alternat, gem, pip, pip3, sane-utils.post, alternatives, chef-client, apk, snapd]

- macro: package_mgmt_procs
condition: proc.name in (package_mgmt_binaries)
Expand Down

0 comments on commit 32bae35

Please sign in to comment.