(fix): Changed PreventExecFrpolicy from file to process (#208)

* changed policy from file to process
5GSEC · Jul 3, 2024 · fc1b2c5 · fc1b2c5
1 parent 7f7a00e
commit fc1b2c5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/adapter/nimbus-kubearmor/processor/kspbuilder.go b/pkg/adapter/nimbus-kubearmor/processor/kspbuilder.go
@@ -268,8 +268,8 @@ func disallowChRoot() kubearmorv1.KubeArmorPolicy {
 func disallowBinaries() kubearmorv1.KubeArmorPolicy { // ref: https://www.tenable.com/audits/items/search?q=noexec&sort=&page=1
 	return kubearmorv1.KubeArmorPolicy{
 		Spec: kubearmorv1.KubeArmorPolicySpec{
-			File: kubearmorv1.FileType{
-				MatchDirectories: []kubearmorv1.FileDirectoryType{
+			Process: kubearmorv1.ProcessType{
+				MatchDirectories: []kubearmorv1.ProcessDirectoryType{
 					{
 						Directory: "/var/tmp/",
 						Recursive: true,