From efbeb90c23ddb6b95aa03f75187aaf8141218646 Mon Sep 17 00:00:00 2001 From: mozillazg Date: Sun, 3 Dec 2023 01:18:03 +0000 Subject: [PATCH] fix for more benchmarks --- cfg/cis-1.5/node.yaml | 4 ---- cfg/cis-1.8/node.yaml | 4 ---- cfg/k3s-cis-1.23/node.yaml | 4 ---- cfg/rke-cis-1.23/node.yaml | 4 ---- cfg/rke2-cis-1.23/node.yaml | 4 ---- 5 files changed, 20 deletions(-) diff --git a/cfg/cis-1.5/node.yaml b/cfg/cis-1.5/node.yaml index 1349054..fe47d64 100644 --- a/cfg/cis-1.5/node.yaml +++ b/cfg/cis-1.5/node.yaml @@ -48,8 +48,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -64,8 +62,6 @@ groups: test_items: - flag: root:root set: true - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/cis-1.8/node.yaml b/cfg/cis-1.8/node.yaml index d51cb69..04f4270 100644 --- a/cfg/cis-1.8/node.yaml +++ b/cfg/cis-1.8/node.yaml @@ -45,8 +45,6 @@ groups: compare: op: bitmask value: "600" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -60,8 +58,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/k3s-cis-1.23/node.yaml b/cfg/k3s-cis-1.23/node.yaml index 211cdbc..80f0c5a 100644 --- a/cfg/k3s-cis-1.23/node.yaml +++ b/cfg/k3s-cis-1.23/node.yaml @@ -47,8 +47,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -62,8 +60,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/rke-cis-1.23/node.yaml b/cfg/rke-cis-1.23/node.yaml index 12d3679..3fac4fa 100644 --- a/cfg/rke-cis-1.23/node.yaml +++ b/cfg/rke-cis-1.23/node.yaml @@ -46,8 +46,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -61,8 +59,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig diff --git a/cfg/rke2-cis-1.23/node.yaml b/cfg/rke2-cis-1.23/node.yaml index c05fb39..596208a 100644 --- a/cfg/rke2-cis-1.23/node.yaml +++ b/cfg/rke2-cis-1.23/node.yaml @@ -48,8 +48,6 @@ groups: compare: op: bitmask value: "644" - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, @@ -63,8 +61,6 @@ groups: bin_op: or test_items: - flag: root:root - - flag: "$proxykubeconfig" - set: false remediation: | Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root $proxykubeconfig