File tree Expand file tree Collapse file tree
applications/openshift-virtualization/kubevirt-seccomp-profile-permissions Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11documentation_complete : true
22
3-
43platform : ' {{{ product }}}-node'
54
65{{%- set kubeletconf_path = "/var/lib/kubelet/seccomp/kubevirt/kubevirt.json" %}}
76
8-
97title : ' Ensure kubevirt seccomp profile file permission is set to 700 or more restrictive'
108
119description : |-
1210 {{{ describe_file_permissions(file=kubeletconf_path, perms="0700") }}}
1311
1412rationale : |-
15- This configuration ensures that only authorized users have access to modify the
16- seccomp profile, thereby preventing unauthorized alterations to the allowed system calls for
17- virt-launcher pods. By enforcing stringent permission controls, potential security risks
13+ This configuration ensures that only authorized users have access to modify the
14+ seccomp profile, thereby preventing unauthorized alterations to the allowed system calls for
15+ virt-launcher pods. By enforcing stringent permission controls, potential security risks
1816 associated with unrestricted access to sensitive system calls can be mitigated.
1917
2018severity : medium
You can’t perform that action at this time.
0 commit comments