Skip to content

Commit

Permalink
Changed required_engine_version from 0.26.0 to 26.
Browse files Browse the repository at this point in the history
The 0.36.2 parser reject the 0.26.0 value and falco --version
report engine_version as 26, so using this number as the value.

Signed-off-by: Petter Reinholdtsen <[email protected]>
  • Loading branch information
petterreinholdtsen committed Nov 15, 2023
1 parent 64e2adb commit d3fdcd5
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion rules/falco-incubating_rules.yaml
Original file line number Diff line number Diff line change
@@ -25,7 +25,7 @@

# Starting with version 8, the Falco engine supports exceptions.
# However the Falco rules file does not use them by default.
- required_engine_version: 0.26.0
- required_engine_version: 26

- macro: open_write
condition: (evt.type in (open,openat,openat2) and evt.is_open_write=true and fd.typechar='f' and fd.num>=0)
2 changes: 1 addition & 1 deletion rules/falco-sandbox_rules.yaml
Original file line number Diff line number Diff line change
@@ -25,7 +25,7 @@

# Starting with version 8, the Falco engine supports exceptions.
# However the Falco rules file does not use them by default.
- required_engine_version: 0.26.0
- required_engine_version: 26

# Currently disabled as read/write are ignored syscalls. The nearly
# similar open_write/open_read check for files being opened for
2 changes: 1 addition & 1 deletion rules/falco_rules.yaml
Original file line number Diff line number Diff line change
@@ -25,7 +25,7 @@

# Starting with version 8, the Falco engine supports exceptions.
# However the Falco rules file does not use them by default.
- required_engine_version: 0.26.0
- required_engine_version: 26

# Currently disabled as read/write are ignored syscalls. The nearly
# similar open_write/open_read check for files being opened for

0 comments on commit d3fdcd5

Please sign in to comment.