controls:
- id: SRG-APP-000378-CTR-000885
  levels:
  - high
  title: {{{ full_name }}} runtime must prohibit the instantiation of container
    images without explicit privileged status.
  status: manual
  rules:
  - rbac_least_privilege
