fix(falco_service): falco service needs to write under /sys/module/falco

Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
Andrea Terzolo 2022-10-10 09:20:12 +00:00 committed by poiana
parent 5f2bc6a2d3
commit 48ce85f4da
2 changed files with 2 additions and 0 deletions

View File

@ -17,6 +17,7 @@ NoNewPrivileges=yes
ProtectHome=read-only
ProtectSystem=full
ProtectKernelTunables=true
ReadWritePaths=/sys/module
RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET

View File

@ -17,6 +17,7 @@ NoNewPrivileges=yes
ProtectHome=read-only
ProtectSystem=full
ProtectKernelTunables=true
ReadWritePaths=/sys/module
RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET
StandardOutput=null