update(events): disable JavaProcessClassFileDownload

Since it is not in the stable ruleset: https://github.com/falcosecurity/rules/blob/b6ad37371923b28d4db399cf11bd4817f923c286/rules/falco-sandbox_rules.yaml#L1676-L1686 Signed-off-by: Leonardo Grasso <[email protected]>
falcosecurity · Sep 20, 2024 · 1958474 · 1958474
1 parent 490b030
commit 1958474
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/events/syscall/java_process_class_file_download.go b/events/syscall/java_process_class_file_download.go
@@ -18,7 +18,10 @@ import (
 	"github.com/falcosecurity/event-generator/events"
 )
 
-var _ = events.Register(JavaProcessClassFileDownload)
+var _ = events.Register(
+	JavaProcessClassFileDownload,
+	events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action
+)
 
 func JavaProcessClassFileDownload(h events.Helper) error {
 	return h.SpawnAs("java", "helper.CombinedServerClient")