Update debugfs_launched_in_privilleged_container.go

Signed-off-by: Kapil Sharma <[email protected]>
falcosecurity · Mar 27, 2024 · 356e5c9 · 356e5c9
1 parent 932edcd
commit 356e5c9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/events/syscall/debugfs_launched_in_privilleged_container.go b/events/syscall/debugfs_launched_in_privilleged_container.go
@@ -25,7 +25,7 @@ var _ = events.Register(DebugfsLaunchedInPrivilegedContainer)
 
 func DebugfsLaunchedInPrivilegedContainer(h events.Helper) error {
     if h.InContainer() {
-        cmd := exec.Command("/usr/bin/debugfs")
+        cmd := exec.Command("debugfs")
         cmd.SysProcAttr = &syscall.SysProcAttr{
             Cloneflags: syscall.CLONE_NEWNS | syscall.CLONE_NEWUSER,
         }