-
Weakness
-
Resolution: Duplicate
-
Major
-
None
-
4.20.0
-
Security & Compliance
-
False
-
-
None
-
None
-
None
-
None
-
None
-
CCXDEV Sprint 150, CCXDEV Sprint 153
-
2
-
None
-
None
-
None
-
None
-
None
-
None
-
None
When enabling readOnlyRootFilesystem in insights, make update was not run so the generated ibm deployment was not updated which means insights-operator will not be readOnlyRootFilesystem in hypershift
This security tracking issue was filed based on manifesting data available to Product Security in https://deptopia.prodsec.redhat.com/ui/home. This data indicates that the component noted in the "pscomponent" label was found to be affected by this vulnerability. If you believe this issue is not actionable and was created erroneously, please fill out the following form and close this issue as Closed with a resolution of Obsolete. This will prompt Product Security to review what type of error caused this Jira issue to be created, and prevent further mistakes of this type in the future.
https://forms.gle/LnXaf5aCAHaV6g8T8
To better understand the distinction between a component being Affected vs Not Affected, please read the following article:
https://docs.engineering.redhat.com/pages/viewpage.action?spaceKey=PRODSEC&title=Understanding+Affected+and+Not+Affected
- is related to
-
RFE-4152 [openshift-insights] - readOnlyRootFilesystem should be explicitly to true and if required to false for security reason
-
- Closed
-
- links to