Compare commits
2 Commits
e228753c59
...
8b65362c75
| Author | SHA1 | Date | |
|---|---|---|---|
| 8b65362c75 | |||
| 9b3563ebfc |
@@ -1,13 +1,13 @@
|
||||
apiVersion: security.openshift.io/v1
|
||||
kind: SecurityContextConstraints
|
||||
metadata:
|
||||
name: restricted-hostpath-privesc
|
||||
name: restricted-hostpath-privesc # this scc allows hostPath and allowPrivilegeEscalation
|
||||
allowHostDirVolumePlugin: true
|
||||
allowHostIPC: false
|
||||
allowHostNetwork: false
|
||||
allowHostPID: false
|
||||
allowHostPorts: false
|
||||
allowPrivilegeEscalation: false
|
||||
allowPrivilegeEscalation: true
|
||||
allowPrivilegedContainer: false
|
||||
allowedCapabilities:
|
||||
- CHOWN
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
apiVersion: security.openshift.io/v1
|
||||
kind: SecurityContextConstraints
|
||||
metadata:
|
||||
name: restricted-hostpath-privesc
|
||||
allowHostDirVolumePlugin: true # Needed for /dev/dri hostPath
|
||||
name: restricted-hostpath
|
||||
allowHostDirVolumePlugin: true #this scc allows hostPath
|
||||
allowHostIPC: false
|
||||
allowHostNetwork: false
|
||||
allowHostPID: false
|
||||
allowHostPorts: false
|
||||
allowPrivilegeEscalation: true
|
||||
allowPrivilegeEscalation: false
|
||||
allowPrivilegedContainer: false
|
||||
allowedCapabilities:
|
||||
- CHOWN
|
||||
|
||||
Reference in New Issue
Block a user