diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 152b31af..96120508 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -680,7 +680,7 @@
                            needrestart_binaries,
                            monitoring_binaries, gitlab_binaries, initdb, pg_ctl, awk, falco, cron,
                            erl_child_setup, ceph, PM2, pycompile, py3compile, hhvm, npm, mysql_install_d, serf,
-                           runsv, supervisord, varnishd, crond)
+                           runsv, supervisord, varnishd, crond, logrotate)
     and not trusted_containers
     and not shell_spawning_containers
     and not parent_java_running_echo