mirror of
https://github.com/falcosecurity/falco.git
synced 2025-07-01 00:52:16 +00:00
Allow programs to write below /etc/logstash
At least for some logstash configs, device files get written to below /etc/logstash instead of elsewhere like /var.
This commit is contained in:
parent
e2be47e3c2
commit
d96cf4c369
@ -341,7 +341,7 @@
|
||||
systemd, systemd-machine, debconf-show, rollerd, bind9.postinst, sv,
|
||||
gen_resolvconf., update-ca-certi)
|
||||
and not proc.pname in (sysdigcloud_binaries)
|
||||
and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java)
|
||||
and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash)
|
||||
and not ansible_running_python
|
||||
and not python_running_denyhosts
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user