From 068b1c1d5f94a9d8e3c60ac0fb8ed80eb78213f5 Mon Sep 17 00:00:00 2001
From: Ben <ben@armosec.io>
Date: Sun, 23 Feb 2025 23:41:55 +0200
Subject: [PATCH] Remove perl from whitelist

Signed-off-by: Ben <ben@armosec.io>
---
 pkg/ruleengine/v1/r1000_exec_from_malicious_source.go | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go b/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
index d46aec84..4e41f4a8 100644
--- a/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
+++ b/pkg/ruleengine/v1/r1000_exec_from_malicious_source.go
@@ -59,7 +59,6 @@ var whitelistedProcessesForMaliciousSource = []string{
 	"bash",
 	"dash",
 	"sh",
-	"perl",
 	"supervisord",
 }