普通用户是否可以读rbac token

parallels@ubuntu-linux-22-04-desktop:~/Desktop$ ls -al /var/lib

total 320

drwxr-xr-x 80 root root 4096 Nov 18 2024 .

drwxr-xr-x 14 root root 4096 Jul 8 2022 ..

drwxrwxr-x 4 root root 4096 Jul 8 2022 AccountsService

drwxrwxrwt 2 root root 4096 Mar 19 2022 BrlAPI

drwx------ 2 root root 4096 Nov 24 22:06 NetworkManager

drwxr-xr-x 2 root root 4096 Jul 8 2022 PackageKit

drwxr-xr-x 2 root root 4096 Nov 24 22:06 alsa

lrwxrwxrwx 1 root root 18 Jul 8 2022 app-info -> /var/lib/swcatalog

drwxr-xr-x 3 root root 4096 Nov 28 2023 apport

drwxr-xr-x 5 root root 4096 Nov 21 17:18 apt

drwxr-xr-x 2 root root 4096 Jul 8 2022 aspell

drwxr-x--- 2 avahi-autoipd avahi-autoipd 4096 Jul 8 2022 avahi-autoipd

drwxr-xr-x 2 root root 4096 Aug 24 22:21 binfmts

drwxr-xr-x 2 root root 4096 Mar 24 2022 bluetooth

drwxr-xr-x 2 root root 4096 Feb 7 2022 boltd

drwxr-xr-x 8 root root 4096 Jul 8 2022 cloud

drwx------ 2 root root 4096 Nov 24 22:11 cni

drwxr-xr-x 4 colord colord 4096 Jul 18 2022 colord

drwxr-xr-x 2 root root 4096 Nov 21 17:17 command-not-found

drwx--x--x 11 root root 4096 Mar 28 2025 containerd

drwxr-xr-x 2 root root 4096 Jul 8 2022 dbus

drwxr-xr-x 2 root root 4096 Mar 24 2022 dhcp

drwxr-xr-x 5 root root 4096 Jul 8 2022 dictionaries-common

drwxr-xr-x 3 root root 4096 Sep 15 2023 dkms

drwx--x--- 12 root root 4096 Nov 24 22:06 docker

drwxr-xr-x 3 root root 4096 Nov 24 22:21 dockershim

drwxr-xr-x 7 root root 4096 Nov 21 17:18 dpkg

drwxr-xr-x 3 root root 4096 Jul 8 2022 emacsen-common

drwx------ 3 root root 4096 Nov 24 22:21 etcd

drwx------ 3 root root 4096 Nov 18 2024 etcd.bk

drwx------ 2 root root 4096 Feb 25 2022 fprint

drwx--x--x 5 gdm gdm 4096 Nov 24 22:06 gdm3

drwxr-xr-x 3 root root 4096 May 21 2024 gems

drwxr-xr-x 2 geoclue geoclue 4096 Mar 23 2022 geoclue

drwxr-xr-x 4 root root 4096 Jul 8 2022 ghostscript

drwxr-xr-x 2 root root 4096 Jul 7 2023 git

drwxr-xr-x 4 root root 4096 Jul 8 2022 grub

drwxr-xr-x 2 root root 4096 Jan 22 2022 hp

drwxr-xr-x 2 root root 4096 Jul 8 2022 ispell

drwx------ 8 root root 4096 Nov 24 22:21 kubelet

drwxr-xr-x 3 root root 4096 Jul 8 2022 libreoffice

drwxr-xr-x 3 root root 4096 Jul 8 2022 locales

drwxr-xr-x 2 root root 4096 Nov 24 01:12 logrotate

drwxr-xr-x 2 root root 4096 Jul 8 2022 man-db

drwxr-xr-x 2 root root 4096 Apr 18 2022 misc

drwxr-xr-x 3 root root 4096 Jul 8 2022 openvpn

drwxr-xr-x 2 root root 4096 Mar 25 2022 os-prober

drwxr-xr-x 2 root root 4096 Jun 27 06:35 pam

drwxr-xr-x 3 root root 4096 Nov 24 22:06 parallels-tools

drwxr-xr-x 2 root root 4096 Mar 18 2022 plymouth

drwx------ 3 root root 4096 Apr 21 2022 polkit-1

drwxr-xr-x 2 root root 4096 Jul 8 2022 power-profiles-daemon

drwx------ 2 root root 4096 Apr 21 2022 private

drwxr-xr-x 2 root root 4096 Apr 21 2022 python

drwxr-x--- 2 saned saned 4096 Jul 8 2022 saned

drwxr-xr-x 2 root root 4096 Jul 8 2022 sgml-base

-rw-r--r-- 1 root root 0 Apr 21 2022 shells.state

drwxr-xr-x 3 root root 4096 Sep 15 2023 shim-signed

drwxr-xr-x 23 root root 4096 Nov 24 22:16 snapd

drwxr-xr-x 2 root root 4096 Apr 22 2022 snmp

drwxr-xr-x 10 root root 4096 Jul 8 2022 sss

drwxr-xr-x 3 root root 4096 Apr 21 2022 sudo

drwxr-xr-x 4 root root 4096 Nov 24 07:09 swcatalog

drwxr-xr-x 11 root root 4096 Jul 8 2022 systemd

drwxr-xr-x 2 tss tss 4096 Jan 26 2022 tpm

drwxr-xr-x 4 root root 4096 Nov 24 15:02 ubuntu-advantage

drwxr-xr-x 2 root root 4096 Mar 16 2022 ubuntu-drivers-common

drwxr-xr-x 3 root root 4096 Nov 9 2023 ubuntu-fan

drwxr-xr-x 2 root root 4096 Jul 18 2022 ubuntu-release-upgrader

drwxr-xr-x 3 root root 4096 Feb 3 2024 ucf

drwx------ 2 root root 4096 Jul 8 2022 udisks2

drwxr-xr-x 2 root root 4096 Jul 18 13:51 unattended-upgrades

drwxr-xr-x 2 root root 4096 Jul 18 2022 update-manager

drwxr-xr-x 4 root root 4096 Nov 24 07:10 update-notifier

drwxr-xr-x 2 root root 4096 Mar 10 2022 upower

drwxr-xr-x 2 root root 4096 Mar 25 2022 usb_modeswitch

drwxr-xr-x 2 root root 4096 Jul 8 2022 usbutils

drwxr-xr-x 3 root root 4096 Jul 8 2022 vim

drwxr-xr-x 2 root root 4096 Nov 24 14:58 whoopsie

drwxr-xr-x 2 root root 4096 Jul 8 2022 xfonts

drwxr-xr-x 2 root root 4096 Oct 30 16:25 xkb

drwxr-xr-x 2 root root 4096 Jul 8 2022 xml-core

parallels@ubuntu-linux-22-04-desktop:~/Desktop$ ls -al /var/lib/kubelet/

ls: cannot open directory '/var/lib/kubelet/': Permission denied

结论,不可以读,默认为root权限

相关推荐
滼3 天前
AI 数据安全面试应答框架:从大框架到小点
大数据·人工智能·安全·面试·安全架构
躺柒6 天前
读数据安全架构设计与实践17安全架构案例(下)
数据库·安全·零信任·安全架构·防火墙·无边界
HackTwoHub6 天前
双通道红队 C2,MCP 接入 AI,全自动渗透实战利器,具备自动提权、进程伪装、无文件上线能力,载荷 AES 加密
安全·web安全·网络安全·系统安全·密码学·可信计算技术·安全架构
躺柒8 天前
读数据安全架构设计与实践16安全架构案例(上)
安全·php·零信任·安全架构·防火墙·无边界
磐链科技9 天前
交易所钱包开发的核心技术:解析多链集成、私钥管理与冷热钱包安全架构
安全·区块链·安全架构
迪康Defender13 天前
端点安全选型观察:一体化平台与传统 EDR 的场景差异
运维·经验分享·安全·自动化·学习方法·远程工作·安全架构
几何心凉13 天前
告别补丁式防护:数据安全架构与治理实战指南
安全·安全架构
骇客野人21 天前
企业4A架构(业务架构、应用架构、数据架构、安全架构)完整设计与搭建方案
安全·架构·安全架构
杭州领祺科技21 天前
分布式光伏『四可』接入改造:绿电直连场景下的二次系统通信与安全架构(27 号令 4 区落位 + 7 产品边界)
分布式·安全·安全架构·光伏·电力·绿电直连·二次系统