arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-22 14:48:07 +00:00
Code Issues Releases Wiki Activity

Remove misleading comment about manual checks in node check definition.

Browse Source
This commit is contained in:
Abubakr-Sadik Nii Nai Davis 2017-08-06 16:37:22 +00:00
parent 29122b82ad
commit 9c563b0987
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cfg/node.yaml
View File

@ -285,7 +285,6 @@ groups:
\nFor example, chown root:root $proxyconf" \nFor example, chown root:root $proxyconf"
scored: true scored: true
# TODO: provide flag to WARN about manual checks.
- id: 2.2.7 - id: 2.2.7
text: "Ensure that the certificate authorities file permissions are set to text: "Ensure that the certificate authorities file permissions are set to
644 or more restrictive (Scored)" 644 or more restrictive (Scored)"
@ -298,7 +297,6 @@ groups:
\nchmod 644 <filename>" \nchmod 644 <filename>"
scored: true scored: true
# TODO: provide flag to WARN about manual checks.
- id: 2.2.8 - id: 2.2.8
text: "Ensure that the client certificate authorities file ownership is set to root:root" text: "Ensure that the client certificate authorities file ownership is set to root:root"
audit: "if test -e $ca-file; then stat -c %U:%G $ca-file; fi" audit: "if test -e $ca-file; then stat -c %U:%G $ca-file; fi"