KubeArmor
KubeArmor copied to clipboard
enable/disable visiibility for syscall
Feature Request
Short Description Currently, syscall visibility is handled by turning on/off file visibility of the namespace. We need a separate process for enabling/disabling visibility for syscall.
Describe the solution you'd like
We will add a list of syscalls for which we need to have visibility over those syscalls. We'll add this list to the config map and handle the visibility further.
- We don't support logs today, only alerts based on Policy, so this will enable logs as well.
- turn on/off syscall visibility per namespace based on visibility annotation with an additional string
syscall
- have per syscall on/off switch based on string in config map
NOTE : we already support logs for syscalls