Alessio Greggi
Alessio Greggi
# Describe the feature We should consider designing an **AppArmor** profile to be assigned to **Capsule** when installed. Being a sensitive component in the cluster, this should be a good...
This condition blocks the creation of the `etcd` user with certain configurations. Specifically, when you have a `etcd_deployment_type: kubeadm` and `kube_owner: root`. Being the `root` user already present on the...
**What would you like to be added**: Being `kubelet` managed by **systemd**, it is possible to apply some security features. To have an overview about the topic, you can take...
We should add Windows family support.
Hi, I don't know if it is wanted, but when I run containers, the graylog container has the unhealty label during execution. This seems to be caused by this command:...
Hi, I was trying to integrate this role in a playbook, but it skipped the tasks inside `install.redhat.yml` (running with `--tags mongodb`). Are there any reasons why the tag is...
Fixes #2795 . This PR adds the flag `--abort-on-container-exit` flag for `nerdctl compose up` command. As the flag says, using it all containers are being stopped if any container was...
In order to support **Windows** system, we should add **rego** rules to check for `securityContext` parameters also for this OS. Reading from the official documentation, we should implement a control...
Since the **rego** rules are used to discover potential misconfigurations on the system, my idea was to create a rule that checks for the well know **GTFOBins**. The **GTFOBins** are...
Hi, I've found a UNION SQL Injection into the `search` parameter of `search.php` file. The vulnerable columns are the 3rd, 4th, 5th and 7th as you can see in the...