From a8713086cd3c6d1474d3ec870bbef582901a2474 Mon Sep 17 00:00:00 2001 From: jzandona <79932094+jzandona@users.noreply.github.com> Date: Tue, 12 Nov 2024 07:51:03 -0800 Subject: [PATCH] fixing ruleID typo on gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml (#1418) Co-authored-by: Ariel --- deprecated.txt | 3 ++- packs/gcp_k8.yml | 2 +- .../gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml | 4 ++-- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/deprecated.txt b/deprecated.txt index b6bccd4ea..d27153eab 100644 --- a/deprecated.txt +++ b/deprecated.txt @@ -33,4 +33,5 @@ AWS.CloudTrail.RootConsoleLogin Okta.GeographicallyImprobableAccess Okta.BruteForceLogins Query.Snowflake.PublicRoleGrant -Snowflake.PublicRoleGrant \ No newline at end of file +Snowflake.PublicRoleGrant +GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount \ No newline at end of file diff --git a/packs/gcp_k8.yml b/packs/gcp_k8.yml index 366e22019..df3e5a8df 100644 --- a/packs/gcp_k8.yml +++ b/packs/gcp_k8.yml @@ -8,7 +8,7 @@ PackDefinition: - Standard.GCP.AuditLog # Rules - GCP.K8s.New.Daemonset.Deployed - - GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount + - GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount - GCP.K8S.Privileged.Pod.Created - GCP.K8S.Service.Type.NodePort.Deployed - GCP.K8s.IOC.Activity diff --git a/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml b/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml index d14b691ee..c28921e8d 100644 --- a/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml +++ b/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml @@ -1,6 +1,6 @@ AnalysisType: rule -RuleID: "GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount" -DisplayName: "GCP K8S Pot Create Or Modify Host Path Volume Mount" +RuleID: "GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount" +DisplayName: "GCP K8S Pod Create Or Modify Host Path Volume Mount" Enabled: true LogTypes: - GCP.AuditLog