Steven Chamberlain

Fix permissions of /etc/logrotate.d/suricata

2

Set owner:group of docker/containers-data/suricata/logrotate/suricata inside the Docker container to root:root. Otherwise, these depend on who checked out the SELKS Git repository. logrotate may ignore the file, if it is not...

[ceph-csi](https://github.com/ceph/ceph-csi) for Kubernetes mounts CephFS filesystems under /var/lib/kubelet/plugins/kubernetes.io/csi/cephfs.csi.ceph.com/*/globalmount Wazuh rootcheck scans include /var/lib by default https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/rootcheck.html?utm_source=chatgpt.com#readall As a result, Wazuh on Kubernetes hosts will recurse into those network filesystems, which...

[ceph-csi](https://github.com/ceph/ceph-csi) for Kubernetes mounts CephFS filesystems under /var/lib/kubelet/plugins/kubernetes.io/csi/cephfs.csi.ceph.com/*/globalmount Wazuh rootcheck scans include /var/lib by default https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/rootcheck.html?utm_source=chatgpt.com#readall As a result, Wazuh on Kubernetes hosts will recurse into those network filesystems, which...