ksp-ubuntu-2-proc-dir-recursive-block.yaml

apiVersion: security.kubearmor.com/v1
kind: KubeArmorPolicy
metadata:
  name: ksp-ubuntu-2-proc-dir-recursive-block
  namespace: multiubuntu
spec:
  severity: 2
  selector:
    matchLabels:
      container: ubuntu-2
  process:
    matchDirectories:
    - dir: /usr/ # try env or whoami (permission denied)
      recursive: true
  action:
    Block