github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-13 21:41:23 +00:00
Code Issues Projects Releases Wiki Activity

chore(scripts): small fixes to systemd units.

Browse Source 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
This commit is contained in:
Federico Di Pierro
2023-01-23 10:41:42 +01:00
committed by poiana
parent f96f2179ba
commit 7d355dd2d9
5 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/systemd/falco-bpf.service
View File

@@ -22,4 +22,7 @@ ProtectSystem=full
ProtectKernelTunables=true ProtectKernelTunables=true
RestrictRealtime=true RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET RestrictAddressFamilies=~AF_PACKET
StandardOutput=null StandardOutput=null
[Install]
WantedBy=multi-user.target

5
scripts/systemd/falco-kmod.service
View File

@@ -24,4 +24,7 @@ ProtectKernelTunables=true
ReadWritePaths=/sys/module/falco ReadWritePaths=/sys/module/falco
RestrictRealtime=true RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET RestrictAddressFamilies=~AF_PACKET
StandardOutput=null StandardOutput=null
[Install]
WantedBy=multi-user.target

5
scripts/systemd/falco-modern-bpf.service
View File

@@ -21,4 +21,7 @@ ProtectSystem=full
ProtectKernelTunables=true ProtectKernelTunables=true
RestrictRealtime=true RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET RestrictAddressFamilies=~AF_PACKET
StandardOutput=null StandardOutput=null
[Install]
WantedBy=multi-user.target

3
scripts/systemd/falco-plugin.service
View File

@@ -22,3 +22,6 @@ ProtectKernelTunables=true
RestrictRealtime=true RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET RestrictAddressFamilies=~AF_PACKET
StandardOutput=null StandardOutput=null
[Install]
WantedBy=multi-user.target

1
scripts/systemd/falcoctl-artifact-follow.service
View File

@@ -3,6 +3,7 @@ Description=Falcoctl Artifact Follow: automatic artifacts update service
Documentation=https://falco.org/docs/ Documentation=https://falco.org/docs/
After=falco.target After=falco.target
BindsTo=falco.target BindsTo=falco.target
DefaultDependencies=no
[Service] [Service]
Type=simple Type=simple