kube-hunter/docs/_kb/KHV044.md

vid, title, categories

vid	title	categories
KHV044	Privileged Container	Access Risk

{{ page.vid }} - {{ page.title }}

Issue description

A privileged container is given access to all devices on the host and can work at the kernel level. It is declared using the Pod.spec.containers[].securityContext.privileged attribute. This may be useful for infrastructure containers that perform setup work on the host, but is a dangerous attack vector.

Remediation

Minimize the use of privileged containers.

Use Pod Security Policies to enforce using privileged: false policy.

References

• Privileged mode for pod containers
• Pod Security Policies - Privileged