Skip to content

Commit

Permalink
Append Slash to Sensitive Mount Path startswith
Browse files Browse the repository at this point in the history
Make L#1932 equivalent to L#1898

Signed-off-by: Brad Geesaman <bradgeesaman+github@gmail.com>
  • Loading branch information
bgeesaman committed Sep 10, 2020
1 parent f02a998 commit 65d742f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rules/falco_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1929,7 +1929,7 @@
condition: (user_trusted_containers or
container.image.repository in (trusted_images) or
container.image.repository in (falco_sensitive_mount_images) or
container.image.repository startswith quay.io/sysdig)
container.image.repository startswith quay.io/sysdig/)

# These container images are allowed to run with hostnetwork=true
- list: falco_hostnetwork_images
Expand Down

0 comments on commit 65d742f

Please sign in to comment.