From f8216f20650482318108aef774cfcd7f576a48e6 Mon Sep 17 00:00:00 2001 From: Anurag Date: Fri, 9 Dec 2022 17:01:22 +0530 Subject: [PATCH] add FULL enforcement if active LSM is bpf Signed-off-by: Anurag --- probe/probe.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/probe/probe.go b/probe/probe.go index 9c3b52fd..71ec6750 100644 --- a/probe/probe.go +++ b/probe/probe.go @@ -159,7 +159,9 @@ func PrintProbeResult(c *k8s.Client, o Options) error { func checkLsmSupport(supportedLSM string) { fmt.Printf("\t Enforcement:") - if strings.Contains(supportedLSM, "selinux") { + if strings.Contains(supportedLSM, "bpf") { + color.Green(" Full (Supported LSMs: " + supportedLSM + ")") + } else if strings.Contains(supportedLSM, "selinux") { color.Yellow(" Partial (Supported LSMs: " + supportedLSM + ") \n\t To have full enforcement support, apparmor must be supported") } else if strings.Contains(supportedLSM, "apparmor") || strings.Contains(supportedLSM, "bpf") { color.Green(" Full (Supported LSMs: " + supportedLSM + ")")