fal
github.com/nevins-b/falco2seccomp
go get github.com/nevins-b/falco2seccomp
fal

github.com/nevins-b/falco2seccomp

Convert Falco logs to Docker seccomp profiles

go get github.com/nevins-b/falco2seccomp
Readme

falco2seccomp

This tool is designed to convert Falco JSON logs to Docker seccomp profiles

The Falco rule which this tool is designed to work with looks like:

- rule: container_syscall
  desc: Capture syscalls for any docker container
  priority: WARNING
  condition: container.id != host and syscall.type exists
  output: "%container.id:%syscall.type"

This tool was first introduced in Using-Falco-to-secure-Docker-containers

GitHub Stars

12

LAST COMMIT

6yrs ago

MAINTAINERS

0

CONTRIBUTORS

3

OPEN ISSUES

0

OPEN PRs

0
VersionTagPublished
v0.0.0-20160716133548-5e666e877f5e
1yr ago
No alternatives found
No tutorials found
Add a tutorial