@@ -67,9 +67,6 @@ resource "sysdig_secure_drift_policy" "sample" {
6767 prohibited_binaries {
6868 items = ["/usr/bin/curl"]
6969 }
70- process_based_exceptions {
71- items = ["/usr/bin/curl"]
72- }
7370 }
7471
7572 actions {
@@ -96,16 +93,20 @@ resource "sysdig_secure_drift_policy" "sample" {
9693 description = "Test Drift Rule Description"
9794
9895 enabled = true
96+ use_regex = true
9997
10098 exceptions {
10199 items = ["/usr/bin/sh"]
102100 }
103101 prohibited_binaries {
104102 items = ["/usr/bin/curl"]
105103 }
106- process_based_exceptions {
104+ process_based_exceptions {
107105 items = ["/usr/bin/curl"]
108- }
106+ }
107+ process_based_prohibited_binaries {
108+ items = ["/usr/bin/sh"]
109+ }
109110 }
110111
111112 actions {
@@ -138,16 +139,17 @@ resource "sysdig_secure_drift_policy" "sample" {
138139 description = "Test Drift Rule Description"
139140
140141 enabled = true
142+ use_regex = true
141143
142144 exceptions {
143145 items = ["/usr/bin/sh"]
144146 }
145147 prohibited_binaries {
146148 items = ["/usr/bin/curl"]
147149 }
148- process_based_exceptions {
150+ process_based_exceptions {
149151 items = ["/usr/bin/curl"]
150- }
152+ }
151153 }
152154
153155 actions {}
@@ -177,9 +179,12 @@ resource "sysdig_secure_drift_policy" "sample" {
177179 prohibited_binaries {
178180 items = ["/usr/bin/curl"]
179181 }
180- process_based_exceptions {
182+ process_based_exceptions {
181183 items = ["/usr/bin/curl"]
182- }
184+ }
185+ process_based_prohibited_binaries {
186+ items = ["/usr/bin/sh"]
187+ }
183188 }
184189
185190 actions {
@@ -227,19 +232,23 @@ resource "sysdig_secure_drift_policy" "sample" {
227232
228233 rule {
229234 description = "Test Drift Rule Description"
230- mounted_volume_drift_enabled = true
235+
231236 enabled = true
237+ mounted_volume_drift_enabled = true
232238
233239 exceptions {
234240 items = ["/usr/bin/sh"]
235241 }
236242 prohibited_binaries {
237243 items = ["/usr/bin/curl"]
238244 }
239- process_based_exceptions {
245+ process_based_exceptions {
240246 items = ["/usr/bin/curl"]
241247 }
242- }
248+ process_based_prohibited_binaries {
249+ items = ["/usr/bin/sh"]
250+ }
251+ }
243252}
244253 ` , name )
245254}
0 commit comments