Merge branch 'main' into fix-disallowed-ssh

falcosecurity · Sep 20, 2024 · 3526ec2 · 3526ec2
2 parents e2ede99 + 3604216
commit 3526ec2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/events/syscall/java_process_class_file_download.go b/events/syscall/java_process_class_file_download.go
@@ -18,7 +18,10 @@ import (
 	"github.com/falcosecurity/event-generator/events"
 )
 
-var _ = events.Register(JavaProcessClassFileDownload)
+var _ = events.Register(
+	JavaProcessClassFileDownload,
+	events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action
+)
 
 func JavaProcessClassFileDownload(h events.Helper) error {
 	return h.SpawnAs("java", "helper.CombinedServerClient")

diff --git a/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go b/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go
@@ -26,7 +26,10 @@ import (
 	"github.com/falcosecurity/event-generator/events"
 )
 
-var _ = events.Register(PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse)
+var _ = events.Register(
+	PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse,
+	events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action
+)
 
 func PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse(h events.Helper) error {
 	// Set the GLIBC_TUNABLES environment variable