From 3c96df7130ffcde9ace7e950f87e72e9aff55991 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 6 Jul 2022 17:41:03 -0300 Subject: [PATCH 1/2] Add fix to avoid GLIBC crash --- roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 index fe457a59..1020393b 100644 --- a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 +++ b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 @@ -33,3 +33,10 @@ output.elasticsearch: #output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"] logging.metrics.enabled: false + +seccomp: +default_action: allow +syscalls: +- action: allow + names: + - rseq From f768c013e6b49a381e4cf144bd1389af292233a1 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Wed, 6 Jul 2022 18:04:15 -0300 Subject: [PATCH 2/2] Add fix to avoid GLIBC crash, fix identation --- .../ansible-filebeat-oss/templates/filebeat.yml.j2 | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 index 1020393b..aeeab17d 100644 --- a/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 +++ b/roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2 @@ -35,8 +35,8 @@ output.elasticsearch: logging.metrics.enabled: false seccomp: -default_action: allow -syscalls: -- action: allow - names: - - rseq + default_action: allow + syscalls: + - action: allow + names: + - rseq