From 8952c81610d8085525189656ca3eacad88a0eecb Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 6 Jul 2022 17:40:25 -0300 Subject: [PATCH 1/2] Add fix to avoid GLIBC crash --- roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 index fe457a59..1020393b 100644 --- a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 +++ b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 @@ -33,3 +33,10 @@ output.elasticsearch: #output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"] logging.metrics.enabled: false + +seccomp: +default_action: allow +syscalls: +- action: allow + names: + - rseq From b3d6cdff57fc5aed678ef0e9cad37e3d3050bf9f Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 6 Jul 2022 18:03:49 -0300 Subject: [PATCH 2/2] Add fix to avoid GLIBC crash, fix identation --- .../ansible-filebeat-oss/templates/filebeat.yml.j2 | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 index 1020393b..aeeab17d 100644 --- a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 +++ b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 @@ -35,8 +35,8 @@ output.elasticsearch: logging.metrics.enabled: false seccomp: -default_action: allow -syscalls: -- action: allow - names: - - rseq + default_action: allow + syscalls: + - action: allow + names: + - rseq