Uploaded image for project: 'OpenShift Workloads'
  1. OpenShift Workloads
  2. WRKLDS-1145 DAST Findings - KDO
  3. WRKLDS-1147

Root file system is not read-only

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • kdo-5.0.0
    • 1
    • False
    • None
    • False
    • Workloads Sprint 251, Workloads Sprint 252, Workloads Sprint 254

      Description: "An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk."

      Message": "Container 'descheduler-operator' of Pod 'descheduler-operator-db9fd6d96-9twf7' should set 'securityContext.readOnlyRootFilesystem' to true"

              jchaloup@redhat.com Jan Chaloupka
              catasagan Catalina Sagan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: