Added ptrace rule (#516)

* Added ptrace rule * Update tests * WIP: fixed tests
kubescape · Oct 8, 2024 · adb641c · adb641c
1 parent e76871e
commit adb641c
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/charts/kubescape-operator/templates/node-agent/default-rule-binding-namespaced.yaml b/charts/kubescape-operator/templates/node-agent/default-rule-binding-namespaced.yaml
@@ -35,4 +35,5 @@ spec:
     - ruleName: "Exec to pod"
     - ruleName: "Port forward"
     - ruleName: "Unexpected Egress Network Traffic"
+    - ruleName: "Malicious Ptrace Usage"
 {{- end }}
diff --git a/charts/kubescape-operator/templates/node-agent/default-rule-binding.yaml b/charts/kubescape-operator/templates/node-agent/default-rule-binding.yaml
@@ -53,4 +53,5 @@ spec:
     - ruleName: "Exec to pod"
     - ruleName: "Port forward"
     - ruleName: "Unexpected Egress Network Traffic"
+    - ruleName: "Malicious Ptrace Usage"
 {{- end }}
diff --git a/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap b/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap
@@ -3055,6 +3055,7 @@ all capabilities:
         - ruleName: Exec to pod
         - ruleName: Port forward
         - ruleName: Unexpected Egress Network Traffic
+        - ruleName: Malicious Ptrace Usage
   57: |
     apiVersion: networking.k8s.io/v1
     kind: NetworkPolicy
@@ -8544,6 +8545,7 @@ default capabilities:
         - ruleName: Exec to pod
         - ruleName: Port forward
         - ruleName: Unexpected Egress Network Traffic
+        - ruleName: Malicious Ptrace Usage
   46: |
     apiVersion: networking.k8s.io/v1
     kind: NetworkPolicy