config to manage false positives on CentOS