Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
MKE users must not have permissions to create containers or pods that share the host user namespace.
Description
Discussion Text
To limit the attack surface of MKE, it is important that the nonessential services are not installed and access to the host system uses the concept of least privilege.
User namespaces ensure that a root process inside the container will be mapped to a nonroot process outside the container. Sharing the user namespaces of the host with the container thus does not isolate users on the host with users on the containers.
By default, the host user namespace is shared with the containers until user namespace support is enabled.
User namespaces ensure that a root process inside the container will be mapped to a nonroot process outside the container. Sharing the user namespaces of the host with the container thus does not isolate users on the host with users on the containers.
By default, the host user namespace is shared with the containers until user namespace support is enabled.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.