search

5GSEC / nimbus

Intent driven security automation framework
Apache License 2.0
25 stars 10 forks source link

(update): usr/lib removal #192

Closed VedRatan closed 5 months ago

VedRatan commented 5 months ago

Description

Currently the Karmor policy created out of the intent is disallowing to exec into the pod, which is not the expected behaviour, so removing `/usr/lib` so that a user is able to exec into the pod without any issues. Fixes # (issue) **Does this PR introduce a breaking change?** ## Checklist - [x] PR title follows the `: ` convention - [ ] I use [conventional commits](https://www.conventionalcommits.org/) in my commit messages - [ ] I have updated the [documentation](../docs) accordingly - [ ] I Keep It Small and Simple: The smaller the PR is, the easier it is to review and have it merged - [x] I have performed a self-review of my code - [ ] I have added tests that prove my fix is effective or that my feature works - [ ] New and existing unit tests pass locally with my changes ## Additional information for reviewer #### Mention if this PR is part of any design or a continuation of previous PRs
shivaccuknox commented 5 months ago

This change is being done because the /usr/lib (gcc library) is being accessed as part of executing /bin/bash. This means any binary which is using the library will not be able to execute, and that may cause valid binaries to fail.