discovery-engine icon indicating copy to clipboard operation
discovery-engine copied to clipboard

feat: discover lenient whitelisting policies - Crown Jewel

Open Ankurk99 opened this issue 2 years ago • 0 comments

Description The current discovered security policies are not usable. It's because we are discovering least-permissive policies (for zero trust) by default and if the discovered policy miss any important binary, it can makes the application unusable or even crash. The aim is to discover lenient whitelisting policies - starting with the policies based on mount points.

Working

  • Get all the used mounted mount points from the deployment
  • Check if the mount point is being accessed or not. If not, then deny access to that particular mount point.

cc: @nyrahul

Ankurk99 avatar Apr 25 '23 04:04 Ankurk99