diff --git a/cfg/cis-1.5/node.yaml b/cfg/cis-1.5/node.yaml index 1349054..fe47d64 100644 --- a/cfg/cis-1.5/node.yaml +++ b/cfg/cis-1.5/node.yaml @@ -48,8 +48,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -64,8 +62,6 @@ groups: test_items: - flag: root:root set: true - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/cis-1.8/node.yaml b/cfg/cis-1.8/node.yaml index d51cb69..04f4270 100644 --- a/cfg/cis-1.8/node.yaml +++ b/cfg/cis-1.8/node.yaml @@ -45,8 +45,6 @@ groups: compare: op: bitmask value: "600" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -60,8 +58,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/k3s-cis-1.23/node.yaml b/cfg/k3s-cis-1.23/node.yaml index 211cdbc..80f0c5a 100644 --- a/cfg/k3s-cis-1.23/node.yaml +++ b/cfg/k3s-cis-1.23/node.yaml @@ -47,8 +47,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -62,8 +60,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/rke-cis-1.23/node.yaml b/cfg/rke-cis-1.23/node.yaml index 12d3679..3fac4fa 100644 --- a/cfg/rke-cis-1.23/node.yaml +++ b/cfg/rke-cis-1.23/node.yaml @@ -46,8 +46,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -61,8 +59,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/rke2-cis-1.23/node.yaml b/cfg/rke2-cis-1.23/node.yaml index c05fb39..596208a 100644 --- a/cfg/rke2-cis-1.23/node.yaml +++ b/cfg/rke2-cis-1.23/node.yaml @@ -48,8 +48,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -63,8 +61,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig