From 6b090eac9a17a1a496be2843670a4f4878928efd Mon Sep 17 00:00:00 2001
From: sysdig <info@sysdig.com>
Date: Fri, 23 Jun 2023 05:13:35 +0000
Subject: [PATCH] * Sysdig - remediate sock-shop:load-gen
 "SecurityContext.AllowPrivilegeEscalation" for control "Container allowing
 privileged sub processes"

---
 sock-shop/loadgen.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/sock-shop/loadgen.yaml b/sock-shop/loadgen.yaml
index b68cbb3..9d4b029 100644
--- a/sock-shop/loadgen.yaml
+++ b/sock-shop/loadgen.yaml
@@ -33,4 +33,6 @@ spec:
             memory: 200Mi
           requests:
             cpu: 100m
-            memory: 50Mi
\ No newline at end of file
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false