github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 08:32:12 +00:00
Code Issues Projects Releases Wiki Activity

Let qualys write below /etc

Browse Source
This commit is contained in:
Mark Stemm 2017-08-11 15:42:44 -07:00
parent 7ff2f66437
commit 71fee6753b
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/falco_rules.yaml
View File

@ -382,7 +382,8 @@
apparmor_parser, update-mime, tzdata.config, tzdata.postinst, apparmor_parser, update-mime, tzdata.config, tzdata.postinst,
systemd, systemd-machine, systemd-sysuser, systemd, systemd-machine, systemd-sysuser,
debconf-show, rollerd, bind9.postinst, sv, debconf-show, rollerd, bind9.postinst, sv,
gen_resolvconf., update-ca-certi, certbot, runsv) gen_resolvconf., update-ca-certi, certbot, runsv,
qualys-cloud-ag)
and not proc.pname in (sysdigcloud_binaries, sendmail_config_binaries) and not proc.pname in (sysdigcloud_binaries, sendmail_config_binaries)
and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash, and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash,
/etc/nginx/conf.d, /etc/container_environment) /etc/nginx/conf.d, /etc/container_environment)