Ensure containers run with a high UID usually > 1000 to avoid host conflict

MEDIUM

Description

if containers in your Kubernetes workloads are not configured to run as high UID then the chance of privilege escalation increases provided container is compromised.

Remediation

UID 1000 is assigned to first non-root user. Therefore, it is recommended to set the parameter 'runAsUser' to a higher value, that is, more than 10,000. this will ensure that if a process attempts to escalate privilege outside of the namespace, the process will still run as under-privileged.

Policy Details

Rule Reference ID: AC_K8S_0079
Remediation Available: No
Resource: kubernetes_pod
Resource Category: Compute
Resource Type: Pod

Frameworks