Set more CNDR mounts to be read only

octarinesec · Jul 9, 2023 · cddca94 · cddca94
1 parent e3ba085
commit cddca94
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/cbcontainers/state/components/sensor_daemon_set.go b/cbcontainers/state/components/sensor_daemon_set.go
@@ -84,7 +84,9 @@ var (
 		"root": hostRootPath,
 	}
 	cndrReadOnlyMounts = map[string]struct{}{
-		"root": {},
+		"root":       {},
+		"boot":       {},
+		"os-release": {},
 	}
 )