Add ash to the list of shell binaries

It is specifically used a lot in alpine-based images.
falcosecurity · May 12, 2019 · a7ecac4 · a7ecac4
1 parent 9a5efd6
commit a7ecac4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
@@ -95,7 +95,7 @@
   condition: ((fd.directory=/ or fd.name startswith /root) and fd.name contains "/")
 
 - list: shell_binaries
-  items: [bash, csh, ksh, sh, tcsh, zsh, dash]
+  items: [ash, bash, csh, ksh, sh, tcsh, zsh, dash]
 
 - list: ssh_binaries
   items: [