diff --git a/events/syscall/java_process_class_file_download.go b/events/syscall/java_process_class_file_download.go index 8d286ff..8b01c6f 100644 --- a/events/syscall/java_process_class_file_download.go +++ b/events/syscall/java_process_class_file_download.go @@ -18,7 +18,10 @@ import ( "github.com/falcosecurity/event-generator/events" ) -var _ = events.Register(JavaProcessClassFileDownload) +var _ = events.Register( + JavaProcessClassFileDownload, + events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action +) func JavaProcessClassFileDownload(h events.Helper) error { return h.SpawnAs("java", "helper.CombinedServerClient") diff --git a/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go b/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go index e7d4378..9577acf 100644 --- a/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go +++ b/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go @@ -26,7 +26,10 @@ import ( "github.com/falcosecurity/event-generator/events" ) -var _ = events.Register(PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse) +var _ = events.Register( + PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse, + events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action +) func PotentialLocalPrivilegeEscalationViaEnvironmentVariablesMisuse(h events.Helper) error { // Set the GLIBC_TUNABLES environment variable