Prisma Cloud Compute must use TCP ports above 1024.
An XCCDF Rule
Description
Privileged ports are ports below 1024 that require system privileges for their use. If containers are able to use these ports, the container must be run as a privileged user. The container platform must stop containers that try to map to these ports directly. Allowing nonprivileged ports to be mapped to the container-privileged port is the allowable method when a certain port is needed. Prisma Cloud Compute default TCP ports are 8083 (Console UI and API) and 8084 (Console-to-Defender communication). To use TCP ports below 1024, the Console would have to be configured to use privileged ports.
- ID
- SV-253534r1043177_rule
- Version
- CNTR-PC-000500
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
For Kubernetes deployment:
Edit the deployment.apps/twistlock-console.
Find the - name: TargetPorts below 1024.