CrowdStrike / ansible_collection_falcon

Comprehensive toolkit for streamlining your interactions with the CrowdStrike Falcon platform.
https://galaxy.ansible.com/ui/repo/published/crowdstrike/falcon/
GNU General Public License v3.0
97 stars 60 forks source link

feat: Add ability to change the permissions of the sensor file #484

Closed dhoppe closed 6 months ago

dhoppe commented 6 months ago

This has already been tested, setting the variable falcon_api_sensor_download_mode to 0644.

Before:

TASK [crowdstrike.falcon.falcon_install : CrowdStrike Falcon | Copy Sensor Installation Package to remote host (non-windows)] *******************************************************
fatal: [i-0da31599f96a90199_asg-metadefender-image-ubuntu22-mdtest-202404050828]: FAILED! =>
  msg: 'an error occurred while trying to read the file ''/var/tmp/falcon-sensor_7.13.0-16604_amd64.deb'': [Errno 13] Permission denied: b''/var/tmp/falcon-sensor_7.13.0-16604_amd64.deb''. [Errno 13] Permission denied: b''/var/tmp/falcon-sensor_7.13.0-16604_amd64.deb'''

After:

TASK [crowdstrike.falcon.falcon_install : CrowdStrike Falcon | Permissions of Falcon Sensor Installation Package (local)] ***********************************************************
changed: [i-0da31599f96a90199_asg-metadefender-image-ubuntu22-mdtest-202404050828 -> localhost]

TASK [crowdstrike.falcon.falcon_install : CrowdStrike Falcon | Copy Sensor Installation Package to remote host (non-windows)] *******************************************************
ok: [i-0da31599f96a90199_asg-metadefender-image-ubuntu22-mdtest-202404050828]

Fixes: #481

carlosmmatos commented 6 months ago

Closing in favor of #485