github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-25 09:28:55 +00:00
Code Issues Projects Releases Wiki Activity

Also let mailq setuid.

Browse Source 
Simialr to showq
This commit is contained in:
Mark Stemm 2017-09-25 08:24:48 -07:00
parent 59ab40d457
commit 011cb2f030
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/falco_rules.yaml
View File

@ -221,7 +221,7 @@
condition: proc.name in (coreutils_binaries, user_mgmt_binaries) condition: proc.name in (coreutils_binaries, user_mgmt_binaries)
- list: mail_binaries - list: mail_binaries
items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq] items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq, mailq]
- list: sendmail_config_binaries - list: sendmail_config_binaries
items: [ items: [