Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent Execution from tmp / log folders : Exploit Public facing applications #80

Closed
nandhued opened this issue Mar 18, 2024 · 1 comment · Fixed by #120
Closed

Prevent Execution from tmp / log folders : Exploit Public facing applications #80

nandhued opened this issue Mar 18, 2024 · 1 comment · Fixed by #120
Assignees
@VedRatan
Labels
Intent Intents configure/driver adapters
Milestone
5/31/24

Comments

@nandhued
Copy link

nandhued commented Mar 18, 2024 •
edited by shivaccuknox
Loading

Protecting system folder; /tmp; this should take care of most of the attacks as the attack binaries are loaded into these folders

Do not allow binary execution from a list of folders.

The intent is implemented by the KubeArmor adapter
@nandhued nandhued converted this from a draft issue Mar 18, 2024
@nandhued nandhued added this to the Mar 30th, 2024 milestone Mar 18, 2024
@nandhued nandhued moved this from 📋 Backlog to 🏗 In progress in NIMBUS Mar 18, 2024
@nandhued nandhued moved this from 🏗 In progress to 📋 Backlog in NIMBUS Mar 21, 2024
@nandhued nandhued removed this from the Mar 30th, 2024 milestone Mar 28, 2024
@shivaccuknox shivaccuknox added this to the 5/31/24 milestone Apr 26, 2024
@shivaccuknox shivaccuknox changed the title KubeArmor adapter: Exploit Public facing applications Protecting System Folder: Exploit Public facing applications May 21, 2024
@shivaccuknox shivaccuknox added the Intent Intents configure/driver adapters label May 21, 2024
@shivaccuknox shivaccuknox changed the title Protecting System Folder: Exploit Public facing applications Prevent Exploits from running: Exploit Public facing applications May 21, 2024
@nandhued nandhued moved this from 📋 Backlog to 🏗 In progress in NIMBUS May 22, 2024
@VedRatan VedRatan mentioned this issue May 23, 2024
Merged
7 tasks
@nandhued nandhued moved this from 🏗 In progress to 👀 In review in NIMBUS May 23, 2024
@shivaccuknox shivaccuknox changed the title Prevent Exploits from running: Exploit Public facing applications Prevent Execution from Folders : Exploit Public facing applications May 24, 2024
@shivaccuknox shivaccuknox changed the title Prevent Execution from Folders : Exploit Public facing applications Prevent Execution from tmp / log folders : Exploit Public facing applications May 24, 2024
@nandhued
Copy link
Author

Reference:
kubearmor/policy-templates#1049
https://www.tenable.com/audits/items/search?q=noexec&sort=&page=1

@github-project-automation github-project-automation bot moved this from 👀 In review to ✅ Done in NIMBUS Jun 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@VedRatan VedRatan

Labels
Intent Intents configure/driver adapters
Projects
NIMBUS
Status: ✅ Done
Milestone
5/31/24
Development

Successfully merging a pull request may close this issue.

[feat]: added exploit pfa intent VedRatan/nimbus
3 participants
@nandhued @VedRatan @shivaccuknox