[D4C] process blocking now enabled for process responses (#162082)

## Summary

Removes restriction on using 'block' action for process responses. The
cloud-defend binary now supports blocking 'fork' and 'exec' events using
bpf LSMs.

For more info on "Defend for containers (D4C)" policies, see here:
https://github.com/elastic/integrations/tree/main/packages/cloud_defend#responses

### Checklist

Delete any items that are not applicable to this PR.

- [x]
[Documentation](https://www.elastic.co/guide/en/kibana/master/development-documentation.html)
was added for features that require explanation or tutorials. see:
https://github.com/elastic/integrations/pull/6987
This commit is contained in:
Karl Godard 2023-07-17 16:35:31 -07:00 committed by GitHub
parent 8a9e09a71d
commit bf195b8493
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -401,20 +401,18 @@ export const ControlGeneralViewResponse = ({
onChange={onToggleAction}
/>
</EuiFlexItem>
{response.type === 'file' && (
<EuiFlexItem grow={false}>
<EuiToolTip content={i18n.actionBlockHelp}>
<EuiCheckbox
id={`response_${index}_block`}
data-test-subj="cloud-defend-chkblockaction"
label={i18n.actionBlock}
checked={blockSelected}
onChange={onToggleAction}
disabled={!alertSelected}
/>
</EuiToolTip>
</EuiFlexItem>
)}
<EuiFlexItem grow={false}>
<EuiToolTip content={i18n.actionBlockHelp}>
<EuiCheckbox
id={`response_${index}_block`}
data-test-subj="cloud-defend-chkblockaction"
label={i18n.actionBlock}
checked={blockSelected}
onChange={onToggleAction}
disabled={!alertSelected}
/>
</EuiToolTip>
</EuiFlexItem>
</EuiFlexGroup>
</EuiFormRow>
</EuiForm>