(update): usr/lib removal (5GSEC#192)

* usr/lib removal --------- Signed-off-by: Ved Ratan <[email protected]>
anurag-rajawat · Jun 24, 2024 · 5953d4a · 5953d4a
1 parent b5e8189
commit 5953d4a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 8 deletions.
diff --git a/examples/clusterscoped/deny-external-network-access.yaml b/examples/clusterscoped/deny-external-network-access.yaml
@@ -20,7 +20,7 @@ spec:
   selector:
     nsSelector:
       matchNames:
-        - prod
+        - default
     workloadSelector:
       matchLabels:
-        app: foo
+        app: nginx
diff --git a/examples/clusterscoped/escape-to-host-si-csib-with-params.yaml b/examples/clusterscoped/escape-to-host-si-csib-with-params.yaml
@@ -23,8 +23,8 @@ spec:
   selector:
     nsSelector:
       matchNames:
-        - prod
+        - default
     workloadSelector:
       matchLabels:
-        app: db
+        app: nginx
         env: dev
diff --git a/pkg/adapter/nimbus-kubearmor/processor/kspbuilder.go b/pkg/adapter/nimbus-kubearmor/processor/kspbuilder.go
@@ -294,10 +294,6 @@ func disallowBinaries() kubearmorv1.KubeArmorPolicy { // ref: https://www.tenabl
 						Directory: "/etc/",
 						Recursive: true,
 					},
-					{
-						Directory: "/usr/lib/",
-						Recursive: true,
-					},
 				},
 				Action: kubearmorv1.ActionType("Block"),
 			},