RepoMirrors
/
osquery-defense-kit
mirror of https://github.com/chainguard-dev/osquery-defense-kit
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update exceptions for vim, tox, and nix

This commit is contained in:
Thomas Stromberg 2022-09-30 14:12:45 -04:00
parent 6bd61b34fd
commit 5cf9ce6859
Failed to extract signature
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
net/unexpected-talkers-linux.sql
View File

@ -228,7 +228,7 @@ WHERE
"443,6,500,tkn", "443,6,500,tkn",
"443,6,500,trivy", "443,6,500,trivy",
"443,6,500,vcluster", "443,6,500,vcluster",
"443,6,500,vim" "443,6,500,vim",
"443,6,500,WebKitNetworkPr", "443,6,500,WebKitNetworkPr",
"443,6,500,wget", "443,6,500,wget",
"443,6,500,wineserver", "443,6,500,wineserver",
@ -241,6 +241,7 @@ WHERE
"7903,6,500,syncthing", "7903,6,500,syncthing",
"80,6,0,.tailscaled-wra", "80,6,0,.tailscaled-wra",
"80,6,0,dnf", "80,6,0,dnf",
"443,6,500,.tox-wrapped",
"80,6,0,NetworkManager", "80,6,0,NetworkManager",
"80,6,0,pacman", "80,6,0,pacman",
"80,6,0,tailscaled", "80,6,0,tailscaled",
@ -271,7 +272,7 @@ WHERE
parent_path LIKE "%/bin/bash" parent_path LIKE "%/bin/bash"
OR parent_path LIKE "%/bin/zsh" OR parent_path LIKE "%/bin/zsh"
OR parent_path LIKE "%/bin/nix" OR parent_path LIKE "%/bin/nix"
OR p.path LIKE "/nix/store/%/bash" OR p.path LIKE "/nix/store/%"
) )
) )
AND NOT p.cmdline LIKE "bash --rcfile /tmp/nix-shell.%" AND NOT p.cmdline LIKE "bash --rcfile /tmp/nix-shell.%"