Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expand pod host volume checks #5

Open
2 tasks
Skybound1 opened this issue Nov 29, 2023 · 0 comments
Open
2 tasks

Expand pod host volume checks #5

Skybound1 opened this issue Nov 29, 2023 · 0 comments

Comments

@Skybound1
Copy link
Collaborator

Current checks are focused around whether any hostPath could expose a path should it exist. For example, /etc/kubernetes/admin.conf would check if that or any parent paths are shared into a pod.

This should be expanded to include both the following:

  • Whether any path in a specified folder is exposed, for example /var/log/ - we don't necessarily care if we have the entire folder, or just a random path within
  • Wildcard paths - for example any /home/*/.ssh/authorized_keys might be deemed acceptable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant