- '$path =~ m#^/var/spool/#'
- '$path =~ m#^/var/lib/ganeti/#'
- '$path =~ m#^/usr/lib/locale/locale-archive#'
+ - '$user eq "root" && $process eq "agetty"'
+ - '$user eq "mysql" && $process eq "mysqld" && $path eq "/[aio]"'
+ - '$user eq "root" && $process eq "multipathd" && $path eq "/[aio]"'
+ - '$user eq "git" && $process =~ m#^(ruby2.3|util.rb:23|ruby-timer-thr)$# && $path =~ m#^/srv/salsa.debian.org/repositories/.*/objects/pack/pack-[0-9a-f]*.(idx|pack)$#'
# vim:syn=yaml