ksp-zend-conf-block.yaml

apiVersion: security.kubearmor.com/v1
kind: KubeArmorPolicy
metadata:
  name: ksp-zend-conf-block
spec:
  message: Permission denied
  tags : ["config","exposure","zend","php"]
  selector:
    matchLabels:
       app: zend
  file:
    matchPaths: 
     - path: /application/configs/application.ini
     - path: /admin/configs/application.ini
     - path: /application.ini
     - path: /aplicacao/application/configs/application.ini
     - path: /cloudexp/application/configs/application.ini
     - path: /cms/application/configs/application.ini
     - path: /moto/application/configs/application.ini
     - path: /Partners/application/configs/application.ini
     - path: /radio/application/configs/application.ini
     - path: /seminovos/application/configs/application.ini
     - path: /shop/application/configs/application.ini
     - path: /site_cg/application/configs/application.ini
     - path: /slr/application/configs/application.ini
       ownerOnly: true  
    severity: 8
  action: Block