github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-08 20:23:32 +00:00
Code Issues Projects Releases Wiki Activity

Let dmeventd write additional dirs

Browse Source
This commit is contained in:
Mark Stemm 2017-10-31 20:50:58 -07:00
parent 56e07f53f2
commit 2eda3432e9
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/falco_rules.yaml
View File

@ -543,7 +543,8 @@
condition: (proc.name=htpasswd and fd.name=/etc/nginx/.htpasswd) condition: (proc.name=htpasswd and fd.name=/etc/nginx/.htpasswd)
- macro: dmeventd_writing_lvm_archive - macro: dmeventd_writing_lvm_archive
condition: (proc.name=dmeventd and fd.name startswith /etc/lvm/archive/) condition: (proc.name=dmeventd and (fd.name startswith /etc/lvm/archive or
fd.name startswith /etc/lvm/backup))
############### ###############
# General Rules # General Rules