diff --git a/cfg/eks-1.0/policies.yaml b/cfg/eks-1.0/policies.yaml index 98dbe289bf35ea0d92488360d82968aa8a460bb6..51f25a0fe0f9131beb84b024f7a4a6a29dcd03e6 100644 --- a/cfg/eks-1.0/policies.yaml +++ b/cfg/eks-1.0/policies.yaml @@ -131,7 +131,7 @@ groups: text: "Minimize the admission of containers with capabilities assigned (Not Scored)" type: "manual" remediation: | - Review the use of capabilites in applications runnning on your cluster. Where a namespace + Review the use of capabilities in applications running on your cluster. Where a namespace contains applications which do not require any Linux capabities to operate consider adding a PSP which forbids the admission of containers which do not drop all capabilities. scored: false