ksp-ubuntu-2-proc-dir-recursive-block.yaml

apiVersion: security.kubearmor.com/v1
kind: KubeArmorPolicy
metadata:
  name: ksp-ubuntu-2-proc-dir-recursive-block
  namespace: multiubuntu
spec:
  severity: 2
  selector:
    matchLabels:
      container: ubuntu-2
  process:
    matchDirectories:
    - dir: /usr/
      recursive: true
  action:
    Block

# multiubuntu_test_05

# test
# $ env
# bash: /usr/bin/env: Permission denied
# $ whoami
# bash: /usr/bin/whoami: Permission denied