Remove misleading comment about manual checks in node check definition.

7 years ago · 9c07527069
parent c39516581b
commit 9c07527069
1 changed files with 0 additions and 2 deletions
--- a/cfg/node.yaml
+++ b/cfg/node.yaml
@ -285,7 +285,6 @@ groups:
              \nFor example, chown root:root $proxyconf"
      scored: true

-# TODO: provide flag to WARN about manual checks.
    - id: 2.2.7
      text: "Ensure that the certificate authorities file permissions are set to
              644 or more restrictive (Scored)"
@ -298,7 +297,6 @@ groups:
              \nchmod 644 <filename>"
      scored: true

-# TODO: provide flag to WARN about manual checks.
    - id: 2.2.8
      text: "Ensure that the client certificate authorities file ownership is set to root:root"
      audit: "if test -e $ca-file; then stat -c %U:%G $ca-file; fi"