diff --git a/queries/1362528.yaml b/queries/1362528.yaml
new file mode 100644
index 00000000..15146ebd
--- /dev/null
+++ b/queries/1362528.yaml
@@ -0,0 +1,3 @@
+query: >
+  message:"Starting dropbear sshd: mkdir: can't create directory '/etc/dropbear': Read-only file system"
+  AND tags:"console"