github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-02 07:05:54 +00:00
Code Issues Projects Releases Wiki Activity

update(cmake,scripts): updated falcoctl to 0.3.0-rc1.

Browse Source 
Fix up falcoctl.service.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Lorenzo Susini <susinilorenzo1@gmail.com>
This commit is contained in:
Federico Di Pierro
2023-01-18 10:57:57 +01:00
committed by poiana
parent 7bdd0bf646
commit 394d495040
2 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
scripts/systemd/falcoctl.service
View File

@@ -4,20 +4,19 @@ Documentation=https://falco.org/docs/
[Service]
Type=simple
ExecStartPre=/usr/bin/falco --version-json > /etc/falco/falco_versions.json
ExecStart=/usr/bin/falcoctl --config=/etc/falcoctl/config.yaml artifact follow --list=/etc/falcoctl/follow.yaml --requirements=/etc/falco/falco_versions.json --pidfile=/var/run/falcoctl.pid
User=root
ExecStart=/usr/bin/falcoctl artifact follow
UMask=0077
TimeoutSec=30
RestartSec=15s
Restart=on-failure
PrivateTmp=true
NoNewPrivileges=yes
ProtectHome=read-only
ProtectSystem=full
ProtectSystem=true
ProtectKernelTunables=true
RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
#RestrictAddressFamilies=~AF_PACKET
#StandardOutput=null
[Install]
WantedBy=multi-user.target