From 0a861ca7c0e668e17d9bf9794c09352001426dc3 Mon Sep 17 00:00:00 2001 From: Tabitha Sable <51767484+tabbysable@users.noreply.github.com> Date: Thu, 6 Aug 2020 18:24:41 -0500 Subject: [PATCH] use traditional UNIX language Refer to the 02000 and 04000 bits in file permissions as "set-user-ID mode" and "set-group-ID mode", as the UNIX manuals have done since 4th edition per suggestion by sftim --- content/en/docs/concepts/security/pod-security-standards.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md index 38ce76b16c..8142706fde 100644 --- a/content/en/docs/concepts/security/pod-security-standards.md +++ b/content/en/docs/concepts/security/pod-security-standards.md @@ -209,7 +209,7 @@ well as lower-trust users.The following listed controls should be enforced/disal Privilege Escalation - Privilege escalation (typically via SUID/SGID file permission bits) should not be allowed.
+ Privilege escalation (such as via set-user-ID or set-group-ID file mode) should not be allowed.

Restricted Fields:
spec.containers[*].securityContext.allowPrivilegeEscalation
spec.initContainers[*].securityContext.allowPrivilegeEscalation