OPSEXP-2877 Add alfresco-audit-storage chart #51
pmaciusAnnotations
10 warnings
|
[HIGH] Container Is Privileged:
charts/alfresco-audit-storage/test.yaml#L519
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
|
|
[HIGH] Privilege Escalation Allowed:
charts/alfresco-audit-storage/test.yaml#L528
Containers should not run with allowPrivilegeEscalation in order to prevent them from gaining more privileges than their parent process
|
|
[HIGH] Privilege Escalation Allowed:
charts/alfresco-audit-storage/test.yaml#L656
Containers should not run with allowPrivilegeEscalation in order to prevent them from gaining more privileges than their parent process
|
|
[HIGH] Privilege Escalation Allowed:
charts/alfresco-audit-storage/test.yaml#L517
Containers should not run with allowPrivilegeEscalation in order to prevent them from gaining more privileges than their parent process
|
|
[HIGH] Volume Mount With OS Directory Write Permissions:
charts/alfresco-audit-storage/test.yaml#L640
Containers can mount sensitive folders from the hosts, giving them potentially dangerous access to critical host configurations and binaries.
|
|
[MEDIUM] Container Running As Root:
charts/alfresco-audit-storage/test.yaml#L518
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running With Low UID:
charts/alfresco-audit-storage/test.yaml#L654
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/alfresco-audit-storage/test.yaml#L518
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/alfresco-audit-storage/test.yaml#L533
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Memory Limits Not Defined:
charts/alfresco-audit-storage/test.yaml#L516
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
|