CrowdStrike broke Debian and Rocky Linux months ago, but no one noticed - eviltoast
  • starneld@infosec.pub
    link
    fedilink
    English
    arrow-up
    7
    ·
    4 months ago

    Setting the update policy to N-2 (or any other configuration) would not have avoided the issue. The Falcon sensor itself wasn’t updated, which is what the update policy controls. As it turns out, you cannot control the content channel updates - you simply always get the updates.