is tracee event sched_process_exec always triggered and included in the output even if it is not included in the policy?

[lidaww]

I have a tracee policy which does not include rule sched_process_exec, however there are still large amount of sched_process_exec event in the log.

[geyslan]

@lidaww check if you're setting some detector that depends on it. Take a look: grep -r 'sched_process_exec' ./detectors/

[lidaww]

@geyslan i have deployed tracee as Kubernetes daemonset, should i run kubectl exec command into the pod? where is directory detectors located?

[geyslan]

All detectors (base and e2e) lie under ./detectors.

[geyslan]

@lidaww Did you find out how to set it? I'm closing it for now, let me know anything. Tks.