core: validate posture and visiblity before dynamically loading

Signed-off-by: tesla59 <nishant@heim.id>
kubearmor · Sep 25, 2024 · 6ba254b · 6ba254b
1 parent 3880c40
commit 6ba254b
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/KubeArmor/core/unorchestratedUpdates.go b/KubeArmor/core/unorchestratedUpdates.go
@@ -52,16 +52,16 @@ func (dm *KubeArmorDaemon) WatchConfigChanges() {
 
 		// Update the default posture
 		globalPosture := tp.DefaultPosture{
-			FileAction:         cfg.GlobalCfg.DefaultFilePosture,
-			NetworkAction:      cfg.GlobalCfg.DefaultNetworkPosture,
-			CapabilitiesAction: cfg.GlobalCfg.DefaultCapabilitiesPosture,
+			FileAction:         validateGlobalDefaultPosture(cfg.GlobalCfg.DefaultFilePosture),
+			NetworkAction:      validateGlobalDefaultPosture(cfg.GlobalCfg.DefaultNetworkPosture),
+			CapabilitiesAction: validateGlobalDefaultPosture(cfg.GlobalCfg.DefaultCapabilitiesPosture),
 		}
 		// Update the visibility
 		visibility := tp.Visibility{
-			File:         strings.Contains(cfg.ConfigVisibility, "file"),
-			Process:      strings.Contains(cfg.ConfigVisibility, "process"),
-			Network:      strings.Contains(cfg.ConfigVisibility, "network"),
-			Capabilities: strings.Contains(cfg.ConfigVisibility, "capabilities"),
+			File:         dm.validateVisibility("file", cfg.GlobalCfg.Visibility),
+			Process:      dm.validateVisibility("process", cfg.GlobalCfg.Visibility),
+			Network:      dm.validateVisibility("network", cfg.GlobalCfg.Visibility),
+			Capabilities: dm.validateVisibility("capabilities", cfg.GlobalCfg.Visibility),
 		}
 
 		// Log the current global posture and visibility