feat(nethvoice): add new HTTP probing rule for '/janus/' path

NethServer · Jan 17, 2025 · 9d0c242 · 9d0c242
1 parent f5e8e81
commit 9d0c242
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/imageroot/tainted/nethvoice-whitelist-http-probing.yaml b/imageroot/tainted/nethvoice-whitelist-http-probing.yaml
@@ -15,3 +15,4 @@ whitelist:
    - evt.Meta.http_status == '404' && evt.Meta.http_verb == 'GET' && evt.Meta.http_path contains '/freepbx/rest/mobileapp/'
    - evt.Meta.http_status == '403' && evt.Meta.http_verb == 'GET' && evt.Meta.http_path contains '/freepbx/rest/migration'
    - evt.Meta.http_status == '403' && evt.Meta.http_verb == 'GET' && evt.Meta.http_path contains '/freepbx/rest/login' # dangerous, this field is done by a user that has not been authenticated
+   - evt.Meta.http_verb == 'GET' && evt.Meta.http_path contains '/janus/' # http code not provided