Lateral movement

Controller of pods without an appropriate seccomp profile

Risk Level

Informational (4)

Platform(s)
  • N/A

Description

Seccomp (secure computing mode) is used to restrict the set of system calls applications can make, allowing cluster administrators greater control over the security of workloads running in the cluster. Kubernetes disables seccomp profiles by default for historical reasons. Orca has detected that {K8sController}'s pods are running without a seccomp profile.
  • Recommended Mitigation

    Consider enabling docker/default seccomp profile in your pod definitions.