feat: discover lenient whitelisting policies - Crown Jewel #715
Open
Description
Description
The current discovered security policies are not usable. It's because we are discovering least-permissive policies (for zero trust) by default and if the discovered policy miss any important binary, it can makes the application unusable or even crash.
The aim is to discover lenient whitelisting policies - starting with the policies based on mount points.
Working
- Get all the used mounted mount points from the deployment
- Check if the mount point is being accessed or not. If not, then deny access to that particular mount point.
cc: @nyrahul