diff --git a/scripts/systemd/falco-bpf.service b/scripts/systemd/falco-bpf.service index e83ef6c9..aec501b6 100644 --- a/scripts/systemd/falco-bpf.service +++ b/scripts/systemd/falco-bpf.service @@ -8,7 +8,7 @@ Wants=falcoctl-artifact-follow.service Type=simple User=root Environment=FALCO_BPF_PROBE= -ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid +ExecStart=/usr/bin/falco UMask=0077 TimeoutSec=30 RestartSec=15s diff --git a/scripts/systemd/falco-custom.service b/scripts/systemd/falco-custom.service index 173e9991..95f806bd 100644 --- a/scripts/systemd/falco-custom.service +++ b/scripts/systemd/falco-custom.service @@ -7,7 +7,7 @@ Wants=falcoctl-artifact-follow.service [Service] Type=simple User=%u -ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid +ExecStart=/usr/bin/falco UMask=0077 TimeoutSec=30 RestartSec=15s diff --git a/scripts/systemd/falco-kmod.service b/scripts/systemd/falco-kmod.service index d928d91d..a149dc74 100644 --- a/scripts/systemd/falco-kmod.service +++ b/scripts/systemd/falco-kmod.service @@ -9,7 +9,7 @@ Wants=falcoctl-artifact-follow.service [Service] Type=simple User=root -ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid +ExecStart=/usr/bin/falco UMask=0077 TimeoutSec=30 RestartSec=15s diff --git a/scripts/systemd/falco-modern-bpf.service b/scripts/systemd/falco-modern-bpf.service index 739b37f3..b87280f7 100644 --- a/scripts/systemd/falco-modern-bpf.service +++ b/scripts/systemd/falco-modern-bpf.service @@ -7,7 +7,7 @@ Wants=falcoctl-artifact-follow.service [Service] Type=simple User=root -ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid --modern-bpf +ExecStart=/usr/bin/falco --modern-bpf UMask=0077 TimeoutSec=30 RestartSec=15s