mirror of
https://github.com/vee1e/KubeArmor.git
synced 2026-09-01 10:18:29 +00:00
23 lines
494 B
YAML
23 lines
494 B
YAML
apiVersion: security.kubearmor.com/v1
|
|
kind: KubeArmorClusterPolicy
|
|
metadata:
|
|
annotations:
|
|
app.kubearmor.io/source: KubeArmor Operator
|
|
app.kubearmor.io/type: harden
|
|
name: harden-write-in-shm-dir
|
|
namespace: gmp-system
|
|
spec:
|
|
action: Audit
|
|
file:
|
|
matchDirectories:
|
|
- dir: /dev/shm/
|
|
readOnly: true
|
|
recursive: true
|
|
message: Alert! write to /dev/shm folder prevented.
|
|
selector:
|
|
matchExpressions:
|
|
severity: 5
|
|
tags:
|
|
- MITRE
|
|
- MITRE_TA0002_Execution
|
|
|