User¶
Allow the request if the container will run as specified user.
Volumes name check is a list of regular expressions. If one rule is valid, then the request is validated.
Examples¶
Example 6: Restrict by run as user name
---
- description: Run as user override.
hosts:
- +.*
default: Allow
policies:
- members:
- all
rules:
any:
User:
- ^nobody$
- ^$USER$
...