Code

Beta rule updates#247

Code

Merged

mstemm merged 33 commits intodevfalcosecurity/falco:devfrom beta-rule-updatesfalcosecurity/falco:beta-rule-updatesCopy head branch name to clipboardJun 19, 2017

+245-72

Commits

Commits on Jun 19, 2017

• Updates from beta customers.

  Show description for 1bc6792
  mstemm

  committed
  1bc6792

  Copy full SHA for 1bc6792

• Reorganize package management binaries

  Show description for c04817a
  mstemm

  committed
  c04817a

  Copy full SHA for c04817a

• Add rules for jenkins

  Show description for dedf3dd
  mstemm

  committed
  dedf3dd

  Copy full SHA for dedf3dd

• Allow npm to run shells.

  Show description for 9a4ab1c
  mstemm

  committed
  9a4ab1c

  Copy full SHA for 9a4ab1c

• Allow urlgrabber/git-remote to access /etc

  Show description for d329711
  mstemm

  committed
  d329711

  Copy full SHA for d329711

• Only look for successful open_read/open_writes

  Show description for 9b31058
  mstemm

  committed
  9b31058

  Copy full SHA for 9b31058

• Allow rename_device to write below /dev

  Show description for 5f26574
  mstemm

  committed
  5f26574

  Copy full SHA for 5f26574

• Allow cloud-init to spawn shells.

  Show description for 4e7b2a8
  mstemm

  committed
  4e7b2a8

  Copy full SHA for 4e7b2a8

• Allow python to run a shell that runs sdchecks

  Show description for 560821f
  mstemm

  committed
  560821f

  Copy full SHA for 560821f

• Allow dev creation binaries to write below etc.

  Show description for 6059b29
  mstemm

  committed
  6059b29

  Copy full SHA for 6059b29

• Allow git binaries to spawn shells.

  Show description for f3385eb
  mstemm

  committed
  f3385eb

  Copy full SHA for f3385eb

• Add /dev/kmsg as an allowed /dev file

  Show description for cc07378
  mstemm

  committed
  cc07378

  Copy full SHA for cc07378

• Allow other make programs to spawn shells.

  Show description for 275bf46
  mstemm

  committed
  275bf46

  Copy full SHA for 275bf46

• Add better mesos support.

  Show description for a47e889
  mstemm

  committed
  a47e889

  Copy full SHA for a47e889

• systemd can listen on network ports.

  Show description for 8552515
  mstemm

  committed
  8552515

  Copy full SHA for 8552515

• Let docker binaries setuid.

  Show description for e1aa8a0
  mstemm

  committed
  e1aa8a0

  Copy full SHA for e1aa8a0

• Change cis-related rules to be less noisy

  Show description for cb3f502
  mstemm

  committed
  cb3f502

  Copy full SHA for cb3f502

• Add quay.io/sysdig as trusted containers

  Show description for c784ce9
  mstemm

  committed
  c784ce9

  Copy full SHA for c784ce9

• Add gitlab-runner-b(uild) as a gitlab binary.

  Show description for 4002927
  mstemm

  committed
  4002927

  Copy full SHA for 4002927

• Add ceph as a shell spawner.

  Show description for 1536f3a
  mstemm

  committed
  1536f3a

  Copy full SHA for 1536f3a

• Allow some shells by command line.

  Show description for 91298ad
  mstemm

  committed
  91298ad

  Copy full SHA for 91298ad

• Allow user 'nobody' to setuid.

  Show description for 76903f2
  mstemm

  committed
  76903f2

  Copy full SHA for 76903f2

• Additional allowed shell commandlines

  mstemm

  committed
  740953d

  Copy full SHA for 740953d

• Add additional shells.

  mstemm

  committed
  056803e

  Copy full SHA for 056803e

• Allow multiple users to become themself.

  Show description for 9e603ea
  mstemm

  committed
  9e603ea

  Copy full SHA for 9e603ea

• More known spawn command lines

  mstemm

  committed
  ddef17c

  Copy full SHA for ddef17c

• Let make binaries be run in containers.

  Show description for 29737b3
  mstemm

  committed
  29737b3

  Copy full SHA for 29737b3

• Add additional shell spawning command lines

  mstemm

  committed
  1bcc4e8

  Copy full SHA for 1bcc4e8

• Add additional apt program apt-listchanges.

  mstemm

  committed
  5082797

  Copy full SHA for 5082797

• Add gitlab-ce as shell spawning container.

  mstemm

  committed
  2804156

  Copy full SHA for 2804156

• Allow PM2 to spawn shells in containers.

  Show description for b86ac13
  mstemm

  committed
  b86ac13

  Copy full SHA for b86ac13

• Clean up pass to fix long lines.

  Show description for 45a116a
  mstemm

  committed
  45a116a

  Copy full SHA for 45a116a

• Change tests for privileged container rules.

  Show description for b714470
  mstemm

  committed
  b714470

  Copy full SHA for b714470