small fpr push

2024-12-18 03:54:30 +00:00 · 2024-10-22 08:20:24 -04:00 · 2024-10-22 08:20:24 -04:00 · 9a69bb55ba
commit 9a69bb55ba
parent 67ce4cd92a
2 changed files with 3 additions and 0 deletions
--- a/detection/execution/unexpected-setuid-binaries.sql
+++ b/detection/execution/unexpected-setuid-binaries.sql
@ -120,6 +120,8 @@ FROM
          '/usr/sbin/umount.nfs4',
          '/usr/sbin/userhelper',
          '/usr/sbin/wodim'
+          '/bin/bwrap',
+          '/usr/bin/bwrap'
        )
      )
      AND NOT (
--- a/detection/impact/evenly-timestomped.sql
+++ b/detection/impact/evenly-timestomped.sql
@ -47,6 +47,7 @@ WHERE
    'printcap',
    'strace-log-merge',
    'installer-info.json'
+    'debian-keyring.gpg'
  )
  AND file.path NOT LIKE '%/lynis%'
  AND file.path NOT LIKE '%/yelp-xsl%'