From 46d371f6c42337569bcb761a48034012cd5bd0ac Mon Sep 17 00:00:00 2001 From: Kapil Sharma Date: Wed, 3 Apr 2024 19:18:51 +0530 Subject: [PATCH] Update launch_suspicious_network_tool_in_container.go Signed-off-by: Kapil Sharma --- .../syscall/launch_suspicious_network_tool_in_container.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/events/syscall/launch_suspicious_network_tool_in_container.go b/events/syscall/launch_suspicious_network_tool_in_container.go index 9cbae795..d085dc7b 100644 --- a/events/syscall/launch_suspicious_network_tool_in_container.go +++ b/events/syscall/launch_suspicious_network_tool_in_container.go @@ -20,7 +20,10 @@ import ( "github.com/falcosecurity/event-generator/events" ) -var _ = events.Register(LaunchSuspiciousNetworkToolInContainer) +var _ = events.Register( + LaunchSuspiciousNetworkToolInContainer, + events.WithDisabled(), // this rule is not included in falco_rules.yaml (stable rules), so disable the action +) func LaunchSuspiciousNetworkToolInContainer(h events.Helper) error { if h.InContainer() {