Query: Minimize the admission of containers wishing to share the host IPC namespace

Description

A container running in the host's IPC namespace can use IPC to interact with processes outside the container. There should be at least one PodSecurityPolicy (PSP) defined which does not permit containers to share the host IPC namespace.

Query

Tables used in this query:

• kubernetes_pod_security_policy

Controls using this query:

• 5.2.3 Minimize the admission of containers wishing to share the host IPC namespace
• Minimize the admission of containers wishing to share the host IPC namespace

SQL