arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-31 19:00:55 +00:00
Code Issues Releases Wiki Activity

Merge pull request #173 from aquasecurity/fix-1.1.37

Browse Source 
Fix check 1.1.37.
This commit is contained in:
Liz Rice 2018-11-08 11:40:06 +00:00 committed by GitHub
commit e1f5bb1ace
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cfg/1.11/master.yaml
View File

@ -607,15 +607,15 @@ groups:
text: "Ensure that the AdvancedAuditing argument is not set to false (Scored)" text: "Ensure that the AdvancedAuditing argument is not set to false (Scored)"
audit: "ps -ef | grep $apiserverbin | grep -v grep" audit: "ps -ef | grep $apiserverbin | grep -v grep"
tests: tests:
bin_op: and bin_op: or
test_items: test_items:
- flag: "--feature-gates" - flag: "--feature-gates"
compare: compare:
op: nothave op: nothave
value: "AdvancedAuditing=false" value: "AdvancedAuditing=false"
set: true set: true
- flag: "--audit-policy-file" - flag: "--feature-gates"
set: true set: false
remediation: | remediation: |
Follow the Kubernetes documentation and set the desired audit policy in the Follow the Kubernetes documentation and set the desired audit policy in the
/etc/kubernetes/audit-policy.yaml file. Then, edit the API server pod specification file $apiserverconf /etc/kubernetes/audit-policy.yaml file. Then, edit the API server pod specification file $apiserverconf