## Kubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir Permissions

- 種別: release
- 関連技術: kubernetes
- 公開日時: 2026-09-16T18:30:00.000Z
- 情報源: Kubernetes Blog (https://kubernetes.io/blog/2026/09/16/kubernetes-v1-37-hardening-container-storage/)
- パーマリンク: https://vulnpulse.app/items/kubernetes-b402f515f974

Kubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security policies, for example, prohibiting deletion of files across containers or execution of arbitrary binaries from writable volumes, directly in Kubernetes without any complicated circumvention. Linux storage and permission fundamentals Before diving into the new Kubernetes features, let us briefly review the low-level Linux security mechanisms that make them possible. Bind mount flags When Linux mou…