mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-25 01:18:53 +00:00
Also let mailq setuid.
Simialr to showq
This commit is contained in:
parent
59ab40d457
commit
011cb2f030
@ -221,7 +221,7 @@
|
||||
condition: proc.name in (coreutils_binaries, user_mgmt_binaries)
|
||||
|
||||
- list: mail_binaries
|
||||
items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq]
|
||||
items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq, mailq]
|
||||
|
||||
- list: sendmail_config_binaries
|
||||
items: [
|
||||
|
Loading…
Reference in New Issue
Block a user