diff --git a/cfg/1.13-json/node.yaml b/cfg/1.13-json/node.yaml index 7724bd3..7140943 100644 --- a/cfg/1.13-json/node.yaml +++ b/cfg/1.13-json/node.yaml @@ -434,8 +434,14 @@ groups: - id: 2.2.8 text: "Ensure that the client certificate authorities file ownership is set to root:root (Scored)" - audit: "/bin/sh -c 'if test -e $ca-file; then stat -c %U:%G $ca-file; fi'" - type: manual + audit: "/bin/sh -c 'if test -e $kubeletcafile; then stat -c %U:%G $kubeletcafile; fi'" + tests: + test_items: + - flag: "root:root" + compare: + op: eq + value: root:root + set: true remediation: | Run the following command to modify the ownership of the --client-ca-file . chown root:root