Skip to content

Commit 5247158

Browse files
[cherry-pick] Docs: Fix link in security.md (#7007) (#7008)
Docs: Fix link in security.md (#7007) Co-authored-by: nginx-aoife <[email protected]>
1 parent 81bae7d commit 5247158

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

site/content/configuration/security.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ By default, the ServiceAccount has access to all Secret resources in the cluster
3434
### Configure root filesystem as read-only
3535

3636
{{< caution >}}
37-
This feature is compatible with [NGINX App Protect WAFv5](https://docs.nginx.com/nginx-app-protect-waf-v5/). It is not compatible with [NGINX App Protect WAF](https://docs.nginx.com/nginx-app-protect-waf/) or [NGINX App Protect DoS](https://docs.nginx.com/nginx-app-protect-dos/).
37+
This feature is compatible with [NGINX App Protect WAFv5](https://docs.nginx.com/nginx-app-protect-waf/v5/). It is not compatible with [NGINX App Protect WAFv4](https://docs.nginx.com/nginx-app-protect-waf/v4/) or [NGINX App Protect DoS](https://docs.nginx.com/nginx-app-protect-dos/).
3838
{{< /caution >}}
3939

4040
NGINX Ingress Controller is designed to be resilient against attacks in various ways, such as running the service as non-root to avoid changes to files. We recommend setting filesystems on all containers to read-only, this includes `nginx-ingress-controller`, though also includes `waf-enforcer` and `waf-config-mgr` when NGINX App Protect WAFv5 is in use. This is so that the attack surface is further reduced by limiting changes to binaries and libraries.

0 commit comments

Comments
 (0)