Merge pull request #1939 from g3rhard/g3rhard-patch-2

Little fix for AppArmor rules (added 5100 rule as parent)
ossec · Aug 9, 2023 · 0e70ff3 · 0e70ff3
2 parents 7a1075b + c3ee260
commit 0e70ff3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/etc/rules/apparmor_rules.xml b/etc/rules/apparmor_rules.xml
@@ -14,6 +14,7 @@
 <group name="local,syslog,apparmor">
 
   <rule id="52000" level="3">
+    <if_sid>5100</if_sid>
     <decoded_as>iptables</decoded_as>
     <pcre2> apparmor=</pcre2>
     <description>Apparmor grouping</description>