Skip to content

Commit 713f0f5

Browse files
authored
Merge pull request #22959 from tabbysable/master
Correct Privilege Escalation section
2 parents 0bc0131 + 0a861ca commit 713f0f5

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

content/en/docs/concepts/security/pod-security-standards.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -209,11 +209,11 @@ well as lower-trust users.The following listed controls should be enforced/disal
209209
<tr>
210210
<td>Privilege Escalation</td>
211211
<td>
212-
Privilege escalation to root should not be allowed.<br>
212+
Privilege escalation (such as via set-user-ID or set-group-ID file mode) should not be allowed.<br>
213213
<br><b>Restricted Fields:</b><br>
214-
spec.containers[*].securityContext.privileged<br>
215-
spec.initContainers[*].securityContext.privileged<br>
216-
<br><b>Allowed Values:</b> false, undefined/nil<br>
214+
spec.containers[*].securityContext.allowPrivilegeEscalation<br>
215+
spec.initContainers[*].securityContext.allowPrivilegeEscalation<br>
216+
<br><b>Allowed Values:</b> false<br>
217217
</td>
218218
</tr>
219219
<tr>

0 commit comments

Comments
 (0)