arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-05-13 20:38:51 +00:00
Code Issues Releases Wiki Activity

issue #349: changes test 2.2.8 (#351)

Browse Source
This commit is contained in:
Roberto Rojas 2019-07-10 10:54:09 -04:00 committed by Liz Rice
parent 336ca84998
commit d127512ab9
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
cfg/1.13-json/node.yaml
View File

@ -434,8 +434,14 @@ groups:
- id: 2.2.8 - id: 2.2.8
text: "Ensure that the client certificate authorities file ownership is set to root:root (Scored)" text: "Ensure that the client certificate authorities file ownership is set to root:root (Scored)"
audit: "/bin/sh -c 'if test -e $ca-file; then stat -c %U:%G $ca-file; fi'" audit: "/bin/sh -c 'if test -e $kubeletcafile; then stat -c %U:%G $kubeletcafile; fi'"
type: manual tests:
test_items:
- flag: "root:root"
compare:
op: eq
value: root:root
set: true
remediation: | remediation: |
Run the following command to modify the ownership of the --client-ca-file . Run the following command to modify the ownership of the --client-ca-file .
chown root:root <filename> chown root:root <filename>