added back scc-restricted-hostpath

2026-01-13 10:03:28 +11:00
parent b2db01b338
commit e228753c59
2 changed files with 42 additions and 2 deletions
--- a/manifests/scc/scc-restricted-hostpath-privesc.yaml
+++ b/manifests/scc/scc-restricted-hostpath-privesc.yaml
@@ -2,12 +2,12 @@ apiVersion: security.openshift.io/v1
 kind: SecurityContextConstraints
 metadata:
  name: restricted-hostpath-privesc
-allowHostDirVolumePlugin: true # Needed for /dev/dri hostPath
+allowHostDirVolumePlugin: true
 allowHostIPC: false
 allowHostNetwork: false
 allowHostPID: false
 allowHostPorts: false
-allowPrivilegeEscalation: true
+allowPrivilegeEscalation: false
 allowPrivilegedContainer: false
 allowedCapabilities:
  - CHOWN