privesc

Documentation

Index

• Constants
• type AllowPrivilegeEscalation
  • func New() *AllowPrivilegeEscalation
  • func (a *AllowPrivilegeEscalation) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// AllowPrivilegeEscalationNil occurs when the AllowPrivilegeEscalation field is missing or unset in the
	// container SecurityContext
	AllowPrivilegeEscalationNil = "AllowPrivilegeEscalationNil"
	// AllowPrivilegeEscalationTrue occurs when the AllowPrivilegeEscalation field is set to true in the container
	// security context
	AllowPrivilegeEscalationTrue = "AllowPrivilegeEscalationTrue"
)

const Name = "privesc"

const OverrideLabel = "allow-privilege-escalation"

Types

type AllowPrivilegeEscalation

type AllowPrivilegeEscalation struct{}

AllowPrivilegeEscalation implements Auditable

func New

func New() *AllowPrivilegeEscalation

func (*AllowPrivilegeEscalation) Audit

func (a *AllowPrivilegeEscalation) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that AllowPrivilegeEscalation is disabled (set to false) in the container SecurityContext