github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-31 14:11:41 +00:00
Code Issues Projects Releases Wiki Activity

fix(permissions): Restrict the access to /dev on underlying host to read only (with rbac)

Browse Source 
Signed-off-by: Fahad Arshad <fahad.arshad@hobsons.com>
This commit is contained in:
Fahad Arshad 2019-09-13 08:53:24 -04:00 committed by Lorenzo Fontana
parent fcd1d60657
commit b951f2bb7d
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml
View File

@ -33,6 +33,7 @@ spec:
name: containerd-socket
- mountPath: /host/dev
name: dev-fs
readOnly: true
- mountPath: /host/proc
name: proc-fs
readOnly: true