Merge pull request #221 from kranurag7/main

add FULL enforcement if active LSM is bpf
kubearmor · Dec 11, 2022 · fc5e8f1 · fc5e8f1
2 parents 10a711c + f8216f2
commit fc5e8f1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/probe/probe.go b/probe/probe.go
@@ -159,7 +159,9 @@ func PrintProbeResult(c *k8s.Client, o Options) error {
 
 func checkLsmSupport(supportedLSM string) {
 	fmt.Printf("\t Enforcement:")
-	if strings.Contains(supportedLSM, "selinux") {
+	if strings.Contains(supportedLSM, "bpf") {
+		color.Green(" Full (Supported LSMs: " + supportedLSM + ")")
+	} else if strings.Contains(supportedLSM, "selinux") {
 		color.Yellow(" Partial (Supported LSMs: " + supportedLSM + ") \n\t To have full enforcement support, apparmor must be supported")
 	} else if strings.Contains(supportedLSM, "apparmor") || strings.Contains(supportedLSM, "bpf") {
 		color.Green(" Full (Supported LSMs: " + supportedLSM + ")")