TMA-KUBERNETES-1.1.13
Ensure that the default administrative credential file permissions are set to 600
KritisLevel 1Otomatiskubernetes
Deskripsi
Ensure that the admin.conf file (and super-admin.conf file, where it exists) have permissions of 600.
Cara pemeriksaan
Metode audit: Perintah shell
shell
set -f
ok=1; n=0
for f in /etc/kubernetes/admin.conf /etc/kubernetes/super-admin.conf; do
[ -e "$f" ] || continue; n=$((n+1))
p=$(stat -Lc %a "$f") || exit 1
if [ $((0$p & 0177)) -ne 0 ]; then echo "noncompliant: $f mode $p"; ok=0; fi
done
[ "$n" -gt 0 ] || exit 1
if [ "$ok" -eq 1 ]; then echo compliant; fi- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Perintah shell
shell
if [ -e /etc/kubernetes/admin.conf ]; then chmod u-x,go-rwx /etc/kubernetes/admin.conf; fi; if [ -e /etc/kubernetes/super-admin.conf ]; then chmod u-x,go-rwx /etc/kubernetes/super-admin.conf; fiProperti
- Sistem operasi
- Apa saja
- Tag
- kubernetescontrol-planefile-permissions
- Referensi
- CIS Kubernetes Benchmark v2.1.0 - 1.1.13 Ensure that the default administrative credential file permissions are set to 600
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target kubernetes