RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add more exception for local webhook development

This commit is contained in:
Thomas Stromberg 2022-11-16 10:40:46 -05:00
parent e8ee572311
commit 398cbde41f
Failed to extract signature
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
detection/persistence/unexpected-listening-port-linux.sql
View File

@ -105,8 +105,11 @@ WHERE
'8008,6,500,controlplane', '8008,6,500,controlplane',
'8009,6,0,java', '8009,6,0,java',
'80,6,101,nginx', '80,6,101,nginx',
'8443,6,500,webhook',
'80,6,60,nginx', '80,6,60,nginx',
'8008,6,500,webhook',
'8080,6,0,coredns', '8080,6,0,coredns',
'8008,6,500,resolvers',
'8080,6,0,java', '8080,6,0,java',
'8086,6,0,influxd', '8086,6,0,influxd',
'8086,6,500,controller', '8086,6,500,controller',
@ -130,7 +133,7 @@ WHERE
and lp.protocol = 6 and lp.protocol = 6
) )
AND NOT ( AND NOT (
p.name IN ('hugo', 'docker-proxy', 'rootlessport', 'nginx-ingress-c') p.name IN ('hugo', 'docker-proxy', 'rootlessport', 'nginx-ingress-c', 'webhook', 'controller')
AND lp.port > 1024 AND lp.port > 1024
and lp.protocol = 6 and lp.protocol = 6
) )