Skip to content

Instantly share code, notes, and snippets.

@janeczku

janeczku/nv-trck.md

Created February 13, 2024 18:49
Show Gist options
  • Save janeczku/ada0c4e784c70359b0cc370f4e0d8b74 to your computer and use it in GitHub Desktop.
Save janeczku/ada0c4e784c70359b0cc370f4e0d8b74 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. janeczku created this gist Feb 13, 2024.
    8 changes: 8 additions & 0 deletions nv-trck.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,8 @@
    ## Insiderwissen NeuVector

    ### Zero Drift
    - So while in zero drift mode if the process that you are blocking is either pid 1 or is started by pid 1 then Neuvector will not block it
    - Zero drift is more permissive that basic mode! :-P
    - Zero drift mode would seem to enforce more secure configurations? Do you know why it allows for more permissive actions?
    - NeuVector will not block processes that are also used by Kubernetes.
    - https://open-docs.neuvector.com/policy/processrules#zero-drift-process-protection