From b2529f11089be00f7b80830f4a3f6c89057b8ed0 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Mon, 6 Mar 2017 08:00:30 -0800 Subject: [PATCH] Add erl_child_setup as a shell spawner. --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 165bbf0365a..d1af1b91ea5 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -365,7 +365,7 @@ logrotate, ansible, less, adduser, pycompile, py3compile, pyclean, py3clean, pip, pip2, ansible-playboo, man-db, init, pluto, mkinitramfs, unattended-upgr, watch, sysdig, - landscape-sysin, nessusd, PM2, syslog-summary + landscape-sysin, nessusd, PM2, syslog-summary, erl_child_setup ] - rule: Run shell untrusted