OCI OKE Should Minimize Containers Sharing the Host PID Namespace

More Info:

hostPID=true allows a container to view and signal every process on the node, providing trivial paths to escape isolation. Reject pods with hostPID by default in admission policy.

Risk Level

High

Address

Compliance, Security

Compliance Standards

CIS OKE

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation