Merge pull request #534 from Vincent056/aide

OCPBUGS-31257: Exclude additional files in default aide conf
openshift · May 30, 2024 · 0c758a9 · 0c758a9
2 parents 2aac359 + 2c72839
commit 0c758a9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/pkg/controller/fileintegrity/config_defaults.go b/pkg/controller/fileintegrity/config_defaults.go
@@ -52,6 +52,9 @@ CONTENT_EX = sha512+ftype+p+u+g+n+acl+selinux+xattrs
 !/hostroot/etc/machine-config-daemon/node-annotation.json*
 !/hostroot/etc/pki/ca-trust/extracted/java/cacerts$
 !/hostroot/etc/cvo/updatepayloads
+!/hostroot/etc/cni/multus/certs
+!/hostroot/etc/kubernetes/compliance-operator
+!/hostroot/etc/kubernetes/node-feature-discovery
 
 # Catch everything else in /etc
 /hostroot/etc/    CONTENT_EX`
diff --git a/tests/e2e/helpers.go b/tests/e2e/helpers.go
@@ -130,6 +130,9 @@ CONTENT_EX = sha512+ftype+p+u+g+n+acl+selinux+xattrs
 !/hostroot/etc/machine-config-daemon/currentconfig$
 !/hostroot/etc/pki/ca-trust/extracted/java/cacerts$
 !/hostroot/etc/cvo/updatepayloads
+!/hostroot/etc/cni/multus/certs
+!/hostroot/etc/kubernetes/compliance-operator
+!/hostroot/etc/kubernetes/node-feature-discovery
 
 # Catch everything else in /etc
 /hostroot/etc/    CONTENT_EX`