diff --git a/scripts/systemd/falcoctl-artifact-follow.service b/scripts/systemd/falcoctl-artifact-follow.service index 0089e84a..70981a19 100644 --- a/scripts/systemd/falcoctl-artifact-follow.service +++ b/scripts/systemd/falcoctl-artifact-follow.service @@ -6,7 +6,7 @@ PartOf=falco-bpf.service falco-kmod.service falco-modern-bpf.service falco-custo [Service] Type=simple User=root -ExecStart=/usr/bin/falcoctl artifact follow +ExecStart=/usr/bin/falcoctl artifact follow --allowed-types=rulesfile UMask=0077 TimeoutSec=30 RestartSec=15s