Skip to content

Commit

Permalink
Disallow privilege escalation
Browse files Browse the repository at this point in the history
ITHC recommendation: prevent user inside the container from elevating
privileges. It has no impact on containers running as root.
  • Loading branch information
saliceti committed Jun 28, 2024
1 parent 070041d commit ad403da
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions aks/application/resources.tf
Original file line number Diff line number Diff line change
Expand Up @@ -167,6 +167,8 @@ resource "kubernetes_deployment" "main" {
}

security_context {
allow_privilege_escalation = false

seccomp_profile {
type = "RuntimeDefault"
}
Expand Down

0 comments on commit ad403da

Please sign in to comment.