From e3c71642cbb6d0c128ee1a2d31f0debbb514c645 Mon Sep 17 00:00:00 2001 From: Sean <14907745+drudgesentinel@users.noreply.github.com> Date: Tue, 17 Jun 2025 16:19:19 -0700 Subject: [PATCH 1/2] Update values.yaml SYS_RESOURCE explanation In agent 2.59.0, a change was introduced where memory attacks need CAP_SYS_RESOURCE to function. I have updated the associated comments to this effect --- gremlin/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gremlin/values.yaml b/gremlin/values.yaml index 9672ce9..dccf189 100644 --- a/gremlin/values.yaml +++ b/gremlin/values.yaml @@ -135,7 +135,7 @@ gremlin: - SYS_BOOT # Required to run Shutdown attacks - SYS_TIME # Required to run Time Travel attacks - DAC_READ_SEARCH # Required to run Certificate Expiry attacks with CIDR address arguments, and to discover dependencies - - SYS_RESOURCE # Required to run Process Exhaustion attacks against containers + - SYS_RESOURCE # Required to run Process Exhaustion and Memory attacks against containers - SYS_ADMIN # Required to apply impact within container namespaces - SYS_PTRACE # Required to to identify charactistics of container processes (such as associated network) - NET_RAW # Required to discover dependencies From d90cab19abdb4397beb46057f0281203054a3748 Mon Sep 17 00:00:00 2001 From: Sean <14907745+drudgesentinel@users.noreply.github.com> Date: Wed, 26 Nov 2025 10:59:03 -0800 Subject: [PATCH 2/2] Clarify SYS_RESOURCE comment in values.yaml --- gremlin/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gremlin/values.yaml b/gremlin/values.yaml index dccf189..e298358 100644 --- a/gremlin/values.yaml +++ b/gremlin/values.yaml @@ -135,7 +135,7 @@ gremlin: - SYS_BOOT # Required to run Shutdown attacks - SYS_TIME # Required to run Time Travel attacks - DAC_READ_SEARCH # Required to run Certificate Expiry attacks with CIDR address arguments, and to discover dependencies - - SYS_RESOURCE # Required to run Process Exhaustion and Memory attacks against containers + - SYS_RESOURCE # Required to run Memory attacks and Process Exhaustion against containers - SYS_ADMIN # Required to apply impact within container namespaces - SYS_PTRACE # Required to to identify charactistics of container processes (such as associated network) - NET_RAW # Required to discover dependencies