insecureCapabilities

Description

Kubescape looks for these capabilities in containers, which might lead to attackers getting elevated privileges in your cluster. You can see the full list of possible capabilities at https://man7.org/linux/man-pages/man7/capabilities.7.html.

Default values

• SETPCAP
• NET_ADMIN
• NET_RAW
• SYS_MODULE
• SYS_RAWIO
• SYS_PTRACE
• SYS_ADMIN
• SYS_BOOT
• MAC_OVERRIDE
• MAC_ADMIN
• PERFMON
• ALL
• BPF