From d6879219e70ec4a24d001a1494f4adef0c7f9b23 Mon Sep 17 00:00:00 2001 From: Carter Li Date: Thu, 22 Jun 2023 01:42:02 +0000 Subject: [PATCH] Disk (FreeBSD): hide `/compat/linux/*` --- src/detection/disk/disk_bsd.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/detection/disk/disk_bsd.c b/src/detection/disk/disk_bsd.c index e6be77659..e9911eb72 100644 --- a/src/detection/disk/disk_bsd.c +++ b/src/detection/disk/disk_bsd.c @@ -11,7 +11,8 @@ static void detectFsInfo(struct statfs* fs, FFDisk* disk) ffStrbufStartsWithS(&disk->mountpoint, "/var") || ffStrbufStartsWithS(&disk->mountpoint, "/tmp") || ffStrbufStartsWithS(&disk->mountpoint, "/proc") || - ffStrbufStartsWithS(&disk->mountpoint, "/zroot") + ffStrbufStartsWithS(&disk->mountpoint, "/zroot") || + ffStrbufStartsWithS(&disk->mountpoint, "/compat/linux/") ) disk->type = FF_DISK_TYPE_HIDDEN_BIT; else if((fs->f_flags & MNT_NOSUID) || !(fs->f_flags & MNT_LOCAL))