Ensure Seccomp Profile Pod Definitions
An XCCDF Rule
Description
Enable default seccomp profiles in your pod definitions.
Rationale
Seccomp (secure computing mode) is used to restrict the set of system calls applications can make, allowing cluster administrators greater control over the security of workloads running in the cluster. Kubernetes disables seccomp profiles by default for historical reasons. You should enable it to ensure that the workloads have restricted actions available within the container.
- ID
- xccdf_org.ssgproject.content_rule_general_default_seccomp_profile
- Severity
- Medium
- References
- Updated