From 4c95c717d268733ac0f3c6784200b4725975d39a Mon Sep 17 00:00:00 2001
From: Matan Monitz <mmonitz@gmail.com>
Date: Tue, 10 May 2022 13:17:55 +0300
Subject: [PATCH] known_shell_spawn_cmdlines - lighttpd

Signed-off-by: Matan Monitz <mmonitz@gmail.com>
---
 rules/falco_rules.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 1a667e94..ea0a5b69 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -2065,6 +2065,7 @@
     '"sh -c openssl version"',
     '"bash -c id -Gn kafadmin"',
     '"sh -c /bin/sh -c ''date +%%s''"'
+    '"sh -c /usr/share/lighttpd/create-mime.conf.pl"'
     ]
 
 # This list allows for easy additions to the set of commands allowed