Skip to main content

​
More Info:

Containers running with hostIPC=true share the hosts inter-process communication namespace and can read or send signals to other processes on the node. Block this in admission policy except for explicit, audited use cases.

​
Risk Level

High

​
Address

Compliance, Security

​
Compliance Standards

  • CIS OKE

​
Triage and Remediation

​
Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.