Skip to content

Commit 85c3fe2

Browse files
authored
Update content/en/blog/_posts/xxxx-xx-xx-Fine-grained-SupplementalGroups-control/index.md
1 parent 2f56106 commit 85c3fe2

File tree

1 file changed

+1
-1
lines changed
  • content/en/blog/_posts/xxxx-xx-xx-Fine-grained-SupplementalGroups-control

1 file changed

+1
-1
lines changed

content/en/blog/_posts/xxxx-xx-xx-Fine-grained-SupplementalGroups-control/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ Thus, the group membership defined in `/etc/group` in the container image for th
5555

5656
### What's wrong with it?
5757

58-
The _implicitly_ merged group information from `/etc/group` in the container image may cause some concerns particularly in accessing volumes (see [kubernetes/kubernetes#112879](https://issue.k8s.io/112879) for details) because file permission is controlled by uid/gid in Linux. Even worse, the implicit gids from `/etc/group` can not be detected/validated by any policy engines becuase there is no clue for the implicit group information in the manifest. This can also be concern for Kubernetes security.
58+
The _implicitly_ merged group information from `/etc/group` in the container image may cause some concerns particularly in accessing volumes (see [kubernetes/kubernetes#112879](https://issue.k8s.io/112879) for details) because file permission is controlled by uid/gid in Linux. Even worse, the implicit gids from `/etc/group` can not be detected/validated by any policy engines because there is no clue for the implicit group information in the manifest. This can also be a concern for Kubernetes security.
5959

6060
## Fine-grined SupplementalGroups control in a Pod: `SupplementaryGroupsPolicy`
6161

0 commit comments

Comments
 (0)