# Host path mount ban policy

> [HTML Version](kyverno-disallow-hostpath.html)

You can block the use of **hostPath** volumes, preventing containers from accessing the cluster node file system.

## Fill out the configuration file

````
...  
\## policy bans mounting host directories (hostPath volumes)  
disallowHostPath:  
  enabled: true  
\## list of namespaces where the hostPath ban policy will apply  
  namespace:  
    - brix365  
...

````
where:

- `disallowHostPath.enabled`: Set to `true` to enable the policy. The `false` value disables it.

- `disallowHostPath.namespace`: Specify the namespaces to which the policy will apply.

After configuring the security policy, install the **kyverno-policies** chart as described in Step 3 of Phase 2 in [Install Kyverno](install-kyverno.md#install-kyverno-policies).