From c0f56e966a9432a46de8766dc8626cd01f54530e Mon Sep 17 00:00:00 2001 From: Abubakr-Sadik Nii Nai Davis Date: Tue, 6 Nov 2018 14:35:45 +0000 Subject: [PATCH 1/2] Fix check 1.1.37. --- cfg/1.11/master.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cfg/1.11/master.yaml b/cfg/1.11/master.yaml index 554976a..1eacd37 100644 --- a/cfg/1.11/master.yaml +++ b/cfg/1.11/master.yaml @@ -614,8 +614,8 @@ groups: op: nothave value: "AdvancedAuditing=false" set: true - - flag: "--audit-policy-file" - set: true + - flag: "--feature-gates" + set: false remediation: | Follow the Kubernetes documentation and set the desired audit policy in the /etc/kubernetes/audit-policy.yaml file. Then, edit the API server pod specification file $apiserverconf From 4f40a11e840521d3a865cc0e1025ea904d84c644 Mon Sep 17 00:00:00 2001 From: Abubakr-Sadik Nii Nai Davis Date: Wed, 7 Nov 2018 23:54:41 +0000 Subject: [PATCH 2/2] Change binary op from and to or. --- cfg/1.11/master.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cfg/1.11/master.yaml b/cfg/1.11/master.yaml index 1eacd37..d54b2b1 100644 --- a/cfg/1.11/master.yaml +++ b/cfg/1.11/master.yaml @@ -607,7 +607,7 @@ groups: text: "Ensure that the AdvancedAuditing argument is not set to false (Scored)" audit: "ps -ef | grep $apiserverbin | grep -v grep" tests: - bin_op: and + bin_op: or test_items: - flag: "--feature-gates" compare: