hsp-kubearmor-dev-proc-path-block.yaml

apiVersion: security.kubearmor.com/v1
kind: KubeArmorHostPolicy
metadata:
  name: hsp-kubearmor-dev-proc-path-block
spec:
  nodeSelector:
    matchLabels:
      kubernetes.io/hostname: kubearmor-dev
  severity: 5
  process:
    matchPaths:
    - path: /usr/bin/diff
  action:
    Block

# kubearmor-dev_test_01

# test
# $ diff --help
# -bash: /usr/bin/diff: Permission denied

# expectation
# anyone cannot execute /usr/bin/diff