From cff8ca428a859dc560ef6644f8732a861f4634ac Mon Sep 17 00:00:00 2001
From: Mark Stemm <mark.stemm@sysdig.com>
Date: Mon, 25 Sep 2017 08:11:46 -0700
Subject: [PATCH] The right program was mailq

not smmsp, that was the user.
---
 rules/falco_rules.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
index 22329ebf..de9ea68e 100644
--- a/rules/falco_rules.yaml
+++ b/rules/falco_rules.yaml
@@ -226,7 +226,7 @@
 - list: sendmail_config_binaries
   items: [
     update_conf, parse_mc, makemap_hash, newaliases, update_mk, update_tlsm4,
-    update_db, update_mc, ssmtp.postinst, smmsp
+    update_db, update_mc, ssmtp.postinst, mailq
     ]
 
 - list: make_binaries