diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 27e5aa10..2f7b5fe9 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -765,7 +765,7 @@
     and not proc.name in (user_mgmt_binaries, userexec_binaries, package_mgmt_binaries,
      cron_binaries, read_sensitive_file_binaries, shell_binaries, hids_binaries,
      vpn_binaries, mail_config_binaries, nomachine_binaries, sshkit_script_binaries,
-     in.proftpd, mandb)
+     in.proftpd, mandb, salt-minion)
     and not cmp_cp_by_passwd
     and not ansible_running_python
     and not proc.cmdline contains /usr/bin/mandb