diff --git a/events/syscall/polkit_local_privilege_escalation_vulnerability.go b/events/syscall/polkit_local_privilege_escalation_vulnerability.go index 19664fa6..7b456308 100644 --- a/events/syscall/polkit_local_privilege_escalation_vulnerability.go +++ b/events/syscall/polkit_local_privilege_escalation_vulnerability.go @@ -22,11 +22,11 @@ import ( ) var _ = events.Register( - PolkitLocalPrivilegeEscalationVulnerability, + PolkitLocalPrivilegeEscalationVulnerabilityCVE20214034, events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action ) -func PolkitLocalPrivilegeEscalationVulnerability(h events.Helper) error { +func PolkitLocalPrivilegeEscalationVulnerabilityCVE20214034(h events.Helper) error { //To setuid to something non-root user return runAsUser(h, "daemon", "pkexec", "--user", "daemon") }