Update and rename change_namespace_privillege_using_unshare.go to cha…

…nge_namespace_privileges_via_unshare.go Signed-off-by: Kapil Sharma <[email protected]>
falcosecurity · Mar 28, 2024 · 55cf1af · 55cf1af
1 parent 06a5c5b
commit 55cf1af
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/...nge_namespace_privillege_using_unshare.go → ...hange_namespace_privileges_via_unshare.go b/...nge_namespace_privillege_using_unshare.go → ...hange_namespace_privileges_via_unshare.go
@@ -19,14 +19,16 @@ package syscall
 
 import (
     "os/exec"
-    "syscall"
 
     "github.com/falcosecurity/event-generator/events"
 )
 
-var _ = events.Register(ChangeNamespacePrivilegesViaUnshare)
+var _ = events.Register(
+	ChangeNamespacePrivilegesViaUnshare,
+        events.WithDisabled(), // this rules is not included in falco_rules.yaml (stable rules), so disable the action
+)
 
-func MaliciousProcessWithUnshare(h events.Helper) error {
+func ChangeNamespacePrivilegesViaUnshare(h events.Helper) error {
     if h.InContainer() {
         cmd := exec.Command("unshare")