Skip to content

SEC-006.md

Latest commit

 

History

History
31 lines (18 loc) · 935 Bytes

SEC-006.md

File metadata and controls

31 lines (18 loc) · 935 Bytes

SEC-006 Container runs as root

Summary

A container runs as root (runAsUser 0 or default root). Running as root inside the container increases risk on container compromise or breakout.

Severity

Warning

Example

N/A

Symptoms

  • Report shows: Container <name> in pod <ns>/<pod> runs as root
  • Container securityContext.runAsUser is 0 or unset with root default

Resolution

  1. Set runAsNonRoot: true and runAsUser to a non-zero UID at pod or container level
  2. Use images that run as non-root; avoid root for application code
  3. Enforce via Pod Security admission (e.g. restricted policy)
  4. For legacy workloads requiring root, isolate and restrict network and host access

References