ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-01-25 02:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(kubernetes): solve core net raw check

Browse Source
This commit is contained in:
Sergio
2024-05-23 11:23:13 -04:00
parent 95ed9e31dd
commit 53f8ac2d20
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
prowler/providers/kubernetes/services/core/core_minimize_net_raw_capability_admission/core_minimize_net_raw_capability_admission.py
View File

@@ -18,7 +18,7 @@ class core_minimize_net_raw_capability_admission(Check):
capabilities = getattr(security_context, "capabilities", None)
if capabilities:
add_capabilities = getattr(capabilities, "add", [])
if "NET_RAW" in add_capabilities:
if add_capabilities and "NET_RAW" in add_capabilities:
report.status = "FAIL"
report.status_extended = f"Pod {pod.name} has NET_RAW capability in container {container.name}."
break