online
" l4()P@ƟS
h 1
m
Index of /anon_sym/anon/sys/bus/memory/devices/memory42/node0/memory37
Index of /anon_sym/anon/sys/bus/memory/devices/memory42/node0/memory37
h
# lY>Je8[WmLZ7
p #!/usr/bin/bash
# vi:syntax=sh
set -eo pipefail
progname=$(basename "$0")
sub_help(){
echo "Usage: $progname [options]"
echo ""
echo "Subcommands:"
echo " init [username ...]"
echo " disable"
echo ""
echo "For help with each subcommand run:"
echo "$progname -h|--help"
echo ""
}
subcommand=$1
KCARE_PROFILE='/etc/profile.d/kernelcare.sh'
KCARE_SUDOERS='/etc/sudoers.d/kernelcare'
TMP_SUDOERS="/root/kernelcare.sudoers.tmp"
KCARE_FALCON_OVERRIDE_DIR='/etc/systemd/system/falcon-sensor.service.d'
KCARE_FALCON_OVERRIDE="${KCARE_FALCON_OVERRIDE_DIR}/kcare-scanner-interface.conf"
function clean_env_file(){
[ -f "$1" ] && sed -i '/kpatch_package/d' "$1" || :
}
function patch_env_file(){
clean_env_file "$1"
echo "$2${KCARE_PACKAGE_ENV}$3" >> "$1"
}
function patch_falcon(){
# CrowdStrike Falcon's unit file declares no EnvironmentFile, so a
# systemd drop-in is the only supported way to inject LD_PRELOAD.
command -v systemctl >/dev/null 2>&1 || return 0
systemctl cat falcon-sensor.service >/dev/null 2>&1 || return 0
mkdir -p "${KCARE_FALCON_OVERRIDE_DIR}"
cat > "${KCARE_FALCON_OVERRIDE}" << FALCONOVERRIDE
# Managed by kcare-scanner-interface — do not edit manually
[Service]
Environment="${KCARE_PACKAGE_ENV}"
FALCONOVERRIDE
chmod 0644 "${KCA