diff --git a/events/syscall/read_environment_variable_from_proc_files.go b/events/syscall/read_environment_variable_from_proc_files.go index 0d335359..45e8ab51 100644 --- a/events/syscall/read_environment_variable_from_proc_files.go +++ b/events/syscall/read_environment_variable_from_proc_files.go @@ -11,30 +11,26 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ - package syscall import ( - "os/exec" - - "github.com/falcosecurity/event-generator/events" + "os/exec" + + "github.com/falcosecurity/event-generator/events" ) var _ = events.Register( - ReadEnvironmentVariableFromProcFiles, - events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action + ReadEnvironmentVariableFromProcFiles, + events.WithDisabled(), // this rule is not included in falco_rules.yaml (stable rules), so disable the action ) func ReadEnvironmentVariableFromProcFiles(h events.Helper) error { - if h.InContainer() { - cmd := exec.Command("cat", "/proc/*/environ") - err := cmd.Run() - if err != nil { - return err - } - - h.Log().Infof("Environment variables were retrieved from /proc files") - } - - return nil + if h.InContainer() { + cmd := exec.Command("cat", "/proc/self/environ") + err := cmd.Run() + if err != nil { + return err + } + } + return nil }