From 1b93327b59b707097d34fafa274275a1ea0abc48 Mon Sep 17 00:00:00 2001
From: "hacktron-app-stg[bot]"
 <229423810+hacktron-app-stg[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 09:19:22 +0000
Subject: [PATCH] fix: disable privileged mode on web container in
 deployment.yaml

---
 deployment.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/deployment.yaml b/deployment.yaml
index 0f389fa..65eb28a 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -19,8 +19,7 @@ spec:
         - name: web
           image: corp/web:latest # VULN 5: mutable :latest tag, no digest pinning
           securityContext:
-            # VULN 1: privileged container — full access to host devices/kernel
-            privileged: true
+            privileged: false
             # VULN 2: runs as root and permits privilege escalation
             runAsUser: 0
             allowPrivilegeEscalation: true