Skip to content

Commit

Permalink
fix: fix typo safe_etc_dirs
Browse files Browse the repository at this point in the history
Signed-off-by: Trần Đức Phú <[email protected]>
  • Loading branch information
Phu96 authored and poiana committed Oct 23, 2024
1 parent 407e997 commit 283a62f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rules/falco-sandbox_rules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -686,7 +686,7 @@
tags: [maturity_sandbox, host, container, filesystem, mitre_persistence, T1543]

- list: safe_etc_dirs
items: [/etc/cassandra, /etc/ssl/certs/java, /etc/logstash, /etc/nginx/conf.d, /etc/container_environment, /etc/hrmconfig, /etc/fluent/configs.d. /etc/alertmanager]
items: [/etc/cassandra, /etc/ssl/certs/java, /etc/logstash, /etc/nginx/conf.d, /etc/container_environment, /etc/hrmconfig, /etc/fluent/configs.d, /etc/alertmanager]

- macro: fluentd_writing_conf_files
condition: (proc.name=start-fluentd and fd.name in (/etc/fluent/fluent.conf, /etc/td-agent/td-agent.conf))
Expand Down

0 comments on commit 283a62f

Please sign in to comment.