Allow writes below /etc/nginx/conf.d

The nginx docker hub container will write below that directory at startup.
falcosecurity · Jul 14, 2017 · 4da5da0 · 4da5da0
1 parent 7388727
commit 4da5da0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml
@@ -342,7 +342,7 @@
                           debconf-show, rollerd, bind9.postinst, sv,
                           gen_resolvconf., update-ca-certi, certbot)
     and not proc.pname in (sysdigcloud_binaries)
-    and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash)
+    and not fd.directory in (/etc/cassandra, /etc/ssl/certs/java, /etc/logstash, /etc/nginx/conf.d)
     and not ansible_running_python
     and not python_running_denyhosts