mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 11:36:50 +00:00
Initial commit
This commit is contained in:
@@ -0,0 +1,26 @@
|
||||
apiVersion: cilium.io/v1alpha1
|
||||
kind: TracingPolicy
|
||||
metadata:
|
||||
name: sensitive-file-access
|
||||
spec:
|
||||
kprobes:
|
||||
- call: fd_install
|
||||
syscall: false
|
||||
args:
|
||||
- index: 0
|
||||
type: int
|
||||
- index: 1
|
||||
type: file
|
||||
selectors:
|
||||
- matchArgs:
|
||||
- index: 1
|
||||
operator: Prefix
|
||||
values:
|
||||
- /etc/shadow
|
||||
- /etc/passwd
|
||||
- /etc/gshadow
|
||||
- /root/.ssh
|
||||
- /etc/kubernetes/pki
|
||||
- /var/run/secrets/kubernetes.io
|
||||
matchActions:
|
||||
- action: Post
|
||||
Reference in New Issue
Block a user