Merge branch 'main' into feb16-fpr

2024-02-23 16:25:24 -05:00 · 2024-02-23 16:25:24 -05:00 · a266879668
parent 5507ae1458 d1f6aede22
commit a266879668
1 changed files with 2 additions and 1 deletions
--- a/detection/evasion/unusually-tainted-kernel-linux.sql
+++ b/detection/evasion/unusually-tainted-kernel-linux.sql
@ -37,10 +37,11 @@ FROM
    ORDER BY
      km.name ASC
  )
+  -- 4096 is a signed, out of tree, open source driver
  -- 4097 is a signed, out of tree, proprietary driver
  -- 512 is a kernel warning
 WHERE
-  taint NOT IN (0, 512, 4097)
+  taint NOT IN (0, 512, 4096, 4097)
  AND NOT (
    (
      -- 12289 is an unsigned, out of tree, proprietary