gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2026-07-29 07:00:29 -07:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['.github/pull_request_template.md', 'src/README.md', 'src/pe

Browse Source
This commit is contained in:
Translator
2025-01-02 00:00:35 +00:00
parent 6f74ac1a76
commit 5a62f6b0a3
229 changed files with 2195 additions and 2217 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pentesting-cloud/openshift-pentesting/openshift-basic-information.md
+4 -4
View File
@@ -8,7 +8,7 @@ Kabla ya kufanya kazi na OpenShift, hakikisha uko sawa na mazingira ya Kubernete
### Utangulizi
OpenShift ni jukwaa la programu za kontena la Red Hat linalotoa seti ya vipengele vya Kubernetes. OpenShift ina sera kali za usalama. Kwa mfano, inakatazwa kuendesha kontena kama root. Pia inatoa chaguo salama kwa default ili kuimarisha usalama. OpenShift ina konsoli ya wavuti ambayo inajumuisha ukurasa wa kuingia kwa kugusa moja.
OpenShift ni jukwaa la programu za kontena la Red Hat linalotoa seti ya vipengele vya Kubernetes. OpenShift ina sera kali za usalama. Kwa mfano, inakatazwa kuendesha kontena kama root. Pia inatoa chaguo salama-kwa-default ili kuboresha usalama. OpenShift ina konsoli ya wavuti ambayo inajumuisha ukurasa wa kuingia kwa kugusa moja.
#### CLI
@@ -23,11 +23,11 @@ Ili kuingia kwa kutumia CLI:
oc login -u=<username> -p=<password> -s=<server>
oc login -s=<server> --token=<bearer token>
```
### **OpenShift - Security Context Constraints** <a href="#a94e" id="a94e"></a>
### **OpenShift - Muktadha wa Usalama wa Muktadha** <a href="#a94e" id="a94e"></a>
Mbali na [RBAC resources](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) ambazo zinadhibiti kile ambacho mtumiaji anaweza kufanya, OpenShift Container Platform inatoa _security context constraints_ (SCC) ambazo zinadhibiti vitendo ambavyo pod inaweza kufanya na kile ambacho ina uwezo wa kufikia.
Mbali na [rasilimali za RBAC](https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html#architecture-additional-concepts-authorization) zinazodhibiti kile ambacho mtumiaji anaweza kufanya, OpenShift Container Platform inatoa _muktadha wa usalama wa muktadha_ (SCC) zinazodhibiti vitendo ambavyo pod inaweza kutekeleza na kile ambacho ina uwezo wa kufikia.
SCC ni kitu cha sera ambacho kina sheria maalum zinazolingana na miundombinu yenyewe, tofauti na RBAC ambayo ina sheria zinazolingana na Jukwaa. Inatusaidia kufafanua ni vipengele gani vya udhibiti wa ufikiaji wa Linux ambavyo kontena linapaswa kuwa na uwezo wa kuomba/kufanya. Mfano: Linux Capabilities, SECCOMP profiles, Mount localhost dirs, n.k.
SCC ni kitu cha sera ambacho kina sheria maalum zinazolingana na miundombinu yenyewe, tofauti na RBAC ambayo ina sheria zinazolingana na Jukwaa. Inatusaidia kufafanua ni vipengele gani vya udhibiti wa ufikiaji wa Linux ambavyo kontena linapaswa kuwa na uwezo wa kuomba/kutekeleza. Mfano: Uwezo wa Linux, profaili za SECCOMP, Mount localhost dirs, n.k.
{{#ref}}
openshift-scc.md