chore(enforcer): make command args part of alert resource #2019
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
verified changes - == Alert / 2025-03-26 20:59:48.509520 ==
ClusterName: default
HostName: rootxrishabh
NamespaceName: container_namespace
PodName: upbeat_bouman
Labels: org.opencontainers.image.version=24.04,org.opencontainers.image.ref.name=ubuntu,namespaceName=container_namespace,kubearmor.io/container.name=upbeat_bouman
ContainerName: upbeat_bouman
ContainerID: 2b4d8acbd1cf4483c9d0d2e202305edbf3e9c825288bced587a83b5aab4f82b6
ContainerImage: ubuntu
Type: MatchedPolicy
Severity: 1
Source: /usr/bin/bash
Resource: /usr/bin/apt update --forreal
Operation: Process
Action: Block
Data: lsm=SECURITY_BPRM_CHECK
Enforcer: BPFLSM
Result: Permission denied
Cwd: /
HostPID: 626217
HostPPID: 442172
PID: 91
PPID: 442172
ParentProcessName: /usr/bin/bash
ProcessName: /usr/bin/apt
UID: 0 |
Signed-off-by: rootxrishabh <[email protected]>
rootxrishabh
force-pushed
the
BPFLSM-Fullcommand
branch
from
f1d7e57 to
cbea91a
Compare
daemon1024
reviewed
Mar 27, 2025
daemon1024
requested changes
Mar 28, 2025
rootxrishabh
force-pushed
the
BPFLSM-Fullcommand
branch
from
d24c776 to
b0bc38d
Compare
rksharma95
reviewed
Apr 2, 2025
Signed-off-by: Rishabh Soni <[email protected]>
rootxrishabh
force-pushed
the
BPFLSM-Fullcommand
branch
from
b0bc38d to
867072e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Purpose of PR?:
make command args part of alert resource
Fixes #2010
Does this PR introduce a breaking change?
No
If the changes in this PR are manually verified, list down the scenarios covered::
Additional information for reviewer? :
Mention if this PR is part of any design or a continuation of previous PRs
Checklist:
<type>(<scope>): <subject>