From c38933c442efbb3ce20b1a67bbf5ed0f43b1934a Mon Sep 17 00:00:00 2001 From: Kaizhe Huang Date: Sun, 2 Jun 2019 22:58:25 -0700 Subject: [PATCH] minor fix --- rules/falco_rules.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 6e033e95a2f..7cbecd87e39 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1041,7 +1041,7 @@ - macro: rancher_writing_conf condition: (container.image.repository in (rancher_images) - and proc.name in (lib-controller,rancher-dns,healthcheck,rancher-metadat) + and proc.name in (lb-controller,rancher-dns,healthcheck,rancher-metadat) and (fd.name startswith "/etc/haproxy" or fd.name startswith "/etc/rancher-dns") )