fix: Ensure events that modify the system's network environment are c…

…ollected -> variants ++ fix asset Signed-off-by: Manuel Weber <[email protected]>
mondoohq · Dec 3, 2024 · 351e900 · 351e900
1 parent d944c88
commit 351e900
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/mondoo-linux-security.mql.yaml b/core/mondoo-linux-security.mql.yaml
@@ -1387,7 +1387,7 @@ queries:
             || split(" ").containsAll(["-F","key=logins"])
       )
   - uid: mondoo-linux-security-login-and-logout-events-are-collected-other
-    filters: asset.family.contains(/redhat|debian/) == false
+    filters: asset.family.contains(/redhat|debian/) == false && asset.platform != "amazonlinux"
     mql: |
       props.mondooLinuxSecurityAuditFiles.flat.unique.any(_ == /\/var\/log\/lastlog/)
       props.mondooLinuxSecurityAuditFiles.flat.unique.any(_ == /\/var\/log\/tallylog/)