{
  "created": "2026-01-28T11:33:02-07:00",
  "updated": "2026-01-28T11:33:02-07:00",
  "name": "deny-always-list-usr-sbin-chronyd-3-ntp-ubuntu-com-53",
  "description": "",
  "action": "deny",
  "duration": "always",
  "operator": {
    "operand": "list",
    "data": "",
    "type": "list",
    "list": [
     {
        "operand": "dest.host",
        "data": "^(|.*\\.)ubuntu\\.com$",
        "type": "regexp",
        "list": null,
        "sensitive": false
      },
      {
        "operand": "dest.port",
        "data": "53",
        "type": "simple",
        "list": null,
        "sensitive": false
      },
      {
        "operand": "process.path",
        "data": "/usr/sbin/chronyd",
        "type": "simple",
        "list": null,
        "sensitive": false
      }
    ],
    "sensitive": false
  },
  "enabled": true,
  "precedence": false,
  "nolog": false
}