Removing unshare syscall usage from default rule bindings (#109)

* Removing unshare syscall usage from default rule bindings Signed-off-by: Amit Schendel <[email protected]> * Fixing system test Signed-off-by: Amit Schendel <[email protected]> --------- Signed-off-by: Amit Schendel <[email protected]>
armosec · Dec 20, 2023 · 519ac23 · 519ac23
1 parent 298cf07
commit 519ac23
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/chart/kubecop/templates/default-rule-binding.yaml b/chart/kubecop/templates/default-rule-binding.yaml
@@ -35,7 +35,6 @@ spec:
     - ruleName: "Kernel Module Load"
     - ruleName: "Exec Binary Not In Base Image"
     - ruleName: "Malicious SSH Connection"
-    - ruleName: "Unshare System Call usage"
     - ruleName: "Crypto Miners port detected"
     - ruleName: "Exec from mount"
 

diff --git a/system-tests/all_alerts_from_malicious_app.py b/system-tests/all_alerts_from_malicious_app.py
@@ -39,7 +39,6 @@ def all_alerts_from_malicious_app(test_framework):
             "Exec Binary Not In Base Image",
             "Malicious SSH Connection",
             "Exec from mount",
-            "Unshare System Call usage",
             "Crypto Miners port detected"
         ]