mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-11-12 18:59:12 +00:00
parent
d8234ff07c
commit
82614d9b3f
@ -132,7 +132,7 @@ groups:
|
||||
type: "manual"
|
||||
remediation: |
|
||||
Review the use of capabilites in applications runnning on your cluster. Where a namespace
|
||||
contains applicaions which do not require any Linux capabities to operate consider adding
|
||||
contains applications which do not require any Linux capabities to operate consider adding
|
||||
a PSP which forbids the admission of containers which do not drop all capabilities.
|
||||
scored: true
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user