entry1.name PrivateNetwork=
entry1.description Service_has_access_to_the_host's_network
entry1.exposure 0.5
entry2.name User=/DynamicUser=
entry2.description Service_runs_as_root,_option_does_not_matter
entry2.exposure 0.3
entry3.name CapabilityBoundingSet=~CAP_SYS_ADMIN
entry3.description Service_has_administrator_privileges
entry3.exposure 0.3
entry4.name RestrictAddressFamilies=~AF_(INET|INET6)
entry4.description Service_cannot_allocate_Internet_sockets
entry4.exposure -
entry5.name RestrictNamespaces=~CLONE_NEWUSER
entry5.description Service_may_create_user_namespaces
entry5.exposure 0.3
entry6.name NoNewPrivileges=
entry6.description Service_processes_may_acquire_new_privileges
entry6.exposure 0.2
total_entries 6
