github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 08:32:12 +00:00
Code Issues Projects Releases Wiki Activity

update(cmake,scripts): updated falcoctl to 0.3.0-rc1.

Browse Source 
Fix up falcoctl.service.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Lorenzo Susini <susinilorenzo1@gmail.com>
This commit is contained in:
Federico Di Pierro 2023-01-18 10:57:57 +01:00 committed by poiana
parent 7bdd0bf646
commit 394d495040
2 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cmake/modules/falcoctl.cmake
View File

@ -15,14 +15,14 @@ include(ExternalProject)
string(TOLOWER ${CMAKE_HOST_SYSTEM_NAME} FALCOCTL_SYSTEM_NAME) string(TOLOWER ${CMAKE_HOST_SYSTEM_NAME} FALCOCTL_SYSTEM_NAME)
set(FALCOCTL_VERSION "0.2.0-rc1") set(FALCOCTL_VERSION "0.3.0-rc1")
if(${CMAKE_HOST_SYSTEM_PROCESSOR} STREQUAL "x86_64") if(${CMAKE_HOST_SYSTEM_PROCESSOR} STREQUAL "x86_64")
set(FALCOCTL_SYSTEM_PROC_GO "amd64") set(FALCOCTL_SYSTEM_PROC_GO "amd64")
set(FALCOCTL_HASH "82dbd20afc2a3605cb77db6ac79f8b523ffb4d8b224511531fdcf366d2ec9929") set(FALCOCTL_HASH "ddb7da605cb45b6d84c4e7805ff1a0a4e8bed012d8198b74b782695e4c5ac8e0")
else() # aarch64 else() # aarch64
set(FALCOCTL_SYSTEM_PROC_GO "arm64") set(FALCOCTL_SYSTEM_PROC_GO "arm64")
set(FALCOCTL_HASH "e07e9b30e4c2ac75835068a912619db4cad288b300a5ed8c66d1f7ea367c2b96") set(FALCOCTL_HASH "398e380cd24a3ecb2c0967336983bea9621833b08c3442383a412fbc546dfcb8")
endif() endif()
ExternalProject_Add( ExternalProject_Add(

11
scripts/systemd/falcoctl.service
View File

@ -4,20 +4,19 @@ Documentation=https://falco.org/docs/
[Service] [Service]
Type=simple Type=simple
ExecStartPre=/usr/bin/falco --version-json > /etc/falco/falco_versions.json User=root
ExecStart=/usr/bin/falcoctl --config=/etc/falcoctl/config.yaml artifact follow --list=/etc/falcoctl/follow.yaml --requirements=/etc/falco/falco_versions.json --pidfile=/var/run/falcoctl.pid ExecStart=/usr/bin/falcoctl artifact follow
UMask=0077 UMask=0077
TimeoutSec=30 TimeoutSec=30
RestartSec=15s RestartSec=15s
Restart=on-failure Restart=on-failure
PrivateTmp=true PrivateTmp=true
NoNewPrivileges=yes NoNewPrivileges=yes
ProtectHome=read-only ProtectSystem=true
ProtectSystem=full
ProtectKernelTunables=true ProtectKernelTunables=true
RestrictRealtime=true RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET #RestrictAddressFamilies=~AF_PACKET
StandardOutput=null #StandardOutput=null
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target