File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
content/en/docs/concepts/security Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -209,11 +209,11 @@ well as lower-trust users.The following listed controls should be enforced/disal
209
209
<tr>
210
210
<td>Privilege Escalation</td>
211
211
<td>
212
- Privilege escalation to root should not be allowed.<br>
212
+ Privilege escalation (such as via set-user-ID or set-group-ID file mode) should not be allowed.<br>
213
213
<br><b>Restricted Fields:</b><br>
214
- spec.containers[*].securityContext.privileged <br>
215
- spec.initContainers[*].securityContext.privileged <br>
216
- <br><b>Allowed Values:</b> false, undefined/nil <br>
214
+ spec.containers[*].securityContext.allowPrivilegeEscalation <br>
215
+ spec.initContainers[*].securityContext.allowPrivilegeEscalation <br>
216
+ <br><b>Allowed Values:</b> false<br>
217
217
</td>
218
218
</tr>
219
219
<tr>
You can’t perform that action at this time.
0 commit comments