From 89f8e454ba7fce097868428187bc7983a76e1290 Mon Sep 17 00:00:00 2001 From: mustafa-rean <38005442+mustafa-rean@users.noreply.github.com> Date: Wed, 22 Jan 2020 19:30:23 +0530 Subject: [PATCH] Resolved bug in master.yml for cis-1.5 for the apiserverbin variable name (#567) Co-authored-by: Liz Rice --- cfg/cis-1.5/master.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cfg/cis-1.5/master.yaml b/cfg/cis-1.5/master.yaml index fc12468..7207685 100644 --- a/cfg/cis-1.5/master.yaml +++ b/cfg/cis-1.5/master.yaml @@ -734,7 +734,7 @@ groups: - id: 1.2.21 text: "Ensure that the --profiling argument is set to false (Scored)" - audit: "/bin/ps -ef | grep $apiserver | grep -v grep" + audit: "/bin/ps -ef | grep $apiserverbin | grep -v grep" tests: test_items: - flag: "--profiling" @@ -963,7 +963,7 @@ groups: remediation: | Edit the API server pod specification file $apiserverconf on the master node and set the below parameter. - --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 + --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 scored: false - id: 1.3