feat: Disable Netdata in RKHunter

open-contracting · Jan 16, 2025 · a83b1de · a83b1de
1 parent 663c5de
commit a83b1de
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/salt/maintenance/rkhunter/files/rkhunter.conf.local b/salt/maintenance/rkhunter/files/rkhunter.conf.local
@@ -11,9 +11,11 @@ SCRIPTWHITELIST=/bin/which
 SCRIPTWHITELIST=/usr/bin/ldd
 SCRIPTWHITELIST=/usr/sbin/adduser
 ALLOW_SSH_ROOT_USER=without-password
+{%- if salt['pillar.get']('netdata:enabled') == True %}
 ALLOWDEVFILE=/dev/shm/sem.netdata_sem_cgroup_ebpf
 ALLOWDEVFILE=/dev/shm/netdata_sem_cgroup_ebpf
 ALLOWDEVFILE=/dev/shm/netdata_shm_cgroup_ebpf
+{%- endif %}
 ALLOWDEVFILE=/dev/shm/mongoc*
 {%- if salt['pillar.get']('maintenance:patching') != "manual" %}
 # Disabled for autopatching servers