WIP: getting started writing additional policy examples #3435
Conversation
Signed-off-by: AnaisUrlichs <urlichsanais@gmail.com>
| @@ -0,0 +1,12 @@ | |||
| apiVersion: aquasecurity.github.io/v1beta1 | |||
| kind: TraceePolicy | |||
There was a problem hiding this comment.
The apiVersion and kind will soon be changed (@josedonizetti ) so if this will be merged after, don't forget to update it as well
| scope: | ||
| - global | ||
| rules: | ||
| - event: write |
There was a problem hiding this comment.
This event on its own doesn't cover all file writes. There are some other syscalls which may trigger a file write (e.g. writev) so it needs to be clarified in the description or update the policy with all syscalls that may trigger a file write
There was a problem hiding this comment.
aha, thank you for clarifying -- will update it
|
FYIO: #3456 (comment) |
|
@AnaisUrlichs Since this is marked as WIP for collecting policy feedback, I'm converting it to draft. Please feel free to convert it back again. |
|
@geyslan no that's good, I will get back to it once I have time |
This is just a PR WIP to get feedback on the policies.