A critical path for doas does not have secure permissions.
Description
A critical path for doas does not have secure permissions.
Query · wazuh
match="path not secure$"
Fires when
Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.
-
decoded_as=doas -
match="path not secure$"
Rule dependencies
Depends on
-
composes · Wazuh if_sid
51550