add delete / review paths

Signed-off-by: YiscahLevySilas1 <[email protected]>
kubescape · Oct 1, 2023 · 1dc9364 · 1dc9364
1 parent 1a552af
commit 1dc9364
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/rules/host-pid-ipc-privileges/raw.rego b/rules/host-pid-ipc-privileges/raw.rego
@@ -11,6 +11,7 @@ deny[msga] {
 		"alertMessage": sprintf("Pod: %v has hostPID enabled", [pod.metadata.name]),
 		"packagename": "armo_builtins",
 		"alertScore": 7,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"alertObject": {
@@ -29,6 +30,7 @@ deny[msga] {
 		"alertMessage": sprintf("Pod: %v has hostIPC enabled", [pod.metadata.name]),
 		"packagename": "armo_builtins",
 		"alertScore": 7,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"alertObject": {
@@ -47,6 +49,7 @@ deny[msga] {
     msga := {
 	"alertMessage": sprintf("%v: %v has a pod with hostPID enabled", [wl.kind, wl.metadata.name]),
 		"alertScore": 9,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"packagename": "armo_builtins",
@@ -66,6 +69,7 @@ deny[msga] {
     msga := {
 	"alertMessage": sprintf("%v: %v has a pod with hostIPC enabled", [wl.kind, wl.metadata.name]),
 		"alertScore": 9,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"packagename": "armo_builtins",
@@ -84,6 +88,7 @@ deny[msga] {
     msga := {
 	"alertMessage": sprintf("CronJob: %v has a pod with hostPID enabled", [wl.metadata.name]),
 		"alertScore": 9,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"packagename": "armo_builtins",
@@ -103,6 +108,7 @@ deny[msga] {
     msga := {
 	"alertMessage": sprintf("CronJob: %v has a pod with hostIPC enabled", [wl.metadata.name]),
 		"alertScore": 9,
+		"deletePaths": [path],
 		"failedPaths": [path],
 		"fixPaths": [],
 		"packagename": "armo_builtins",