github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-07 01:30:13 +00:00
Code Issues Projects Releases Wiki Activity

update(scripts): added a falcoctl systemd service.

Browse Source 
Add a new dialog to choose whether to enable falcoctl feed.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
This commit is contained in:
Federico Di Pierro
2023-01-10 14:23:10 +01:00
committed by poiana
parent 2a886f7a3d
commit ffce069c96
9 changed files with 96 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
scripts/systemd/falcoctl.service Normal file
View File

@@ -0,0 +1,22 @@
[Unit]
Description=Falcoctl: Administrative tooling for Falco
Documentation=https://github.com/falcosecurity/falcoctl
[Service]
Type=simple
ExecStart=/usr/bin/falcoctl --follow
UMask=0077
TimeoutSec=30
RestartSec=15s
Restart=on-failure
PrivateTmp=true
NoNewPrivileges=yes
ProtectHome=read-only
ProtectSystem=full
ProtectKernelTunables=true
RestrictRealtime=true
RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
[Install]
WantedBy=multi-user.target