Query: DaemonSet containers should not run with root privileges

Description

Containers in a DaemonSet should not run with root privileges. By default, many container services run as the privileged root user, and applications execute inside the container as root despite not requiring privileged execution. Preventing root execution by using non-root containers or a rootless container engine limits the impact of a container compromise.

Query

Tables used in this query:

• kubernetes_daemonset

Controls using this query:

• DaemonSet containers should not run with root privileges

SQL