Limit Privileged Container Use
An XCCDF Rule
Description
Containers should be limited to only the privileges required
to run. To prevent containers from running as privileged containers,
the appropriate Security Context Constraints (SCCs) should set
allowPrivilegedContainer to false.
Rationale
Privileged containers have access to all Linux Kernel capabilities and devices. If a privileged container were compromised, an attacker would have full access to the container and host.
- ID
- xccdf_org.ssgproject.content_rule_scc_limit_privileged_containers
- Severity
- Medium
- References
- Updated