seccomp is not set to Docker/Default or Runtime/Default misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_31
Category - Subcategory	Kubernetes - Access Control
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize

Impact

Secure computing mode (seccomp) is a Linux kernel feature used to restrict actions available within the container. The seccomp() system call operates on the seccomp state of the calling process. The default seccomp profile provides a reliable setting for running containers with seccomp and disables non-essential system calls.

How to Fix

Resource: Pod / Deployment / DaemonSet / StatefulSet / ReplicaSet / ReplicationController / Job / CronJob

• Arguments: securityContext: seccompProfile: type: (Optional: Kubernetes > v1.19) Addition of seccompProfile type: RuntimeDefault or DockerDefault [source,go]

---

apiVersion: v1 kind: Pod metadata: name: spec: containers:

• name: image: securityContext:
• seccompProfile:
• type: RuntimeDefault or
• type: DockerDefault

---

apiVersion: batch/v1beta1 kind: CronJob metadata: name: spec: schedule: <> jobTemplate: spec: template: spec: securityContext:

• seccompProfile:
• type: RuntimeDefault or
• type: DockerDefault

---

apiVersion: <> kind: metadata: name: spec: template: spec: securityContext:

• seccompProfile:
• type: RuntimeDefault or
• type: DockerDefault

---