Search Criteria
Package Details: falcon-sensor 5.33.0_9808-1
| Git Clone URL: | https://aur.archlinux.org/falcon-sensor.git (read-only, click to copy) |
|---|---|
| Package Base: | falcon-sensor |
| Description: | Crowdstrike Falcon Sensor daemon and kernel modules |
| Upstream URL: | https://crowdstrike.com |
| Licenses: | |
| Submitter: | frealgagu |
| Maintainer: | frealgagu |
| Last Packager: | frealgagu |
| Votes: | 3 |
| Popularity: | 0.45 |
| First Submitted: | 2020-12-06 04:56 |
| Last Updated: | 2020-12-06 04:56 |
Latest Comments
squatched commented on 2021-04-22 21:19
Given that Arch isn't an officially supported distribution (by Falcon), installing this does next to nothing. The sensor will detect the kernel as an unsupported kernel and then run in "Reduced Functionality Mode" (RFM) which is basically a health check and that's it.
This MAY be due to secure boot and I would like to poke at that a bit and see if I can get it working but I don't hold out hope that it will. I am also going to play around with LTS versions of the kernel but I think to get this to work, I'd have to go all the way back to the LTS 5.4 kernel given that appears to be the most recent kernel that Falcon supports (due to Ubuntu 20.04 LTS). Even then, given that it's not an officially supported kernel, I'm willing to bet without some serious mucking (or official support), I won't ever get anything more than RFM.
dapolinario commented on 2020-12-29 22:52
I already modified PKGBUILD with this version, locally, and it is working. I received this version straight from the server console.
frealgagu commented on 2020-12-29 22:31
@dapolinario the .deb file, in order to update the sha256sum and test it locally. is there an upstream where I can download it? the only way I know is obtaining it from the server console.
dapolinario commented on 2020-12-29 21:56
Hi! Yes, I have this updated version: 6.12 in deb format. What do you need from me? PKGBUILD?
frealgagu commented on 2020-12-29 21:42
@dapolinario do you have the binaries for version 6.12.0?
if you have the amd for debian I can upgrade it to that version. Unfortunately our system is not updated and the download link is just for 5.33.0