Merge pull request zealvora#13 from jasbir84-zz/patch-10

Update hostpid.md
lyonga1 · Jul 4, 2022 · 6d540cb · 6d540cb
2 parents 581ff23 + 699a0e2
commit 6d540cb
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/domain-3-minimize-microservice-vulnerability/hostpid.md b/domain-3-minimize-microservice-vulnerability/hostpid.md
@@ -56,7 +56,7 @@ spec:
   - min: 0
     max: 65535
   hostIPC: true
-  hostPID: true
+  hostPID: false
   runAsUser:
     rule: 'RunAsAny'
   seLinux:
@@ -66,3 +66,6 @@ spec:
   fsGroup:
     rule: 'RunAsAny'
 ```
+#### Reapply the restrictive policy to not allow hostpid:
+```sh
+kubectl apply -f restrictive-psp.yaml