Skip to main content

​
More Info:

allowPrivilegeEscalation=true lets a process gain more privileges than its parent (for example via setuid binaries). Set it to false in pod security policies to enforce no-new-privs and reduce container breakout paths.

​
Risk Level

High

​
Address

Compliance, Security

​
Compliance Standards

  • Cloudanix Best Practice

​
Triage and Remediation

​
Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.