Skip to content

Commit

Permalink
update(events): disable JavaProcessClassFileDownload
Browse files Browse the repository at this point in the history
Since it is not in the stable ruleset: https://github.com/falcosecurity/rules/blob/b6ad37371923b28d4db399cf11bd4817f923c286/rules/falco-sandbox_rules.yaml#L1676-L1686

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
  • Loading branch information
leogr authored and poiana committed Sep 20, 2024
1 parent 490b030 commit 1958474
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion events/syscall/java_process_class_file_download.go
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,10 @@ import (
"github.com/falcosecurity/event-generator/events"
)

var _ = events.Register(JavaProcessClassFileDownload)
var _ = events.Register(
JavaProcessClassFileDownload,
events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action
)

func JavaProcessClassFileDownload(h events.Helper) error {
return h.SpawnAs("java", "helper.CombinedServerClient")
Expand Down

0 comments on commit 1958474

Please sign in to comment.