TMAegis
Aturan lainnya untuk kubernetes

TMA-KUBERNETES-1.1.13

Ensure that the default administrative credential file permissions are set to 600

KritisLevel 1Otomatiskubernetes

Deskripsi

Ensure that the admin.conf file (and super-admin.conf file, where it exists) have permissions of 600.

Cara pemeriksaan

Metode audit: Perintah shell

shell
set -f
ok=1; n=0
for f in /etc/kubernetes/admin.conf /etc/kubernetes/super-admin.conf; do
  [ -e "$f" ] || continue; n=$((n+1))
  p=$(stat -Lc %a "$f") || exit 1
  if [ $((0$p & 0177)) -ne 0 ]; then echo "noncompliant: $f mode $p"; ok=0; fi
done
[ "$n" -gt 0 ] || exit 1
if [ "$ok" -eq 1 ]; then echo compliant; fi
Output yang diharapkan
compliant

Cara perbaikan

Metode perbaikan: Perintah shell

shell
if [ -e /etc/kubernetes/admin.conf ]; then chmod u-x,go-rwx /etc/kubernetes/admin.conf; fi; if [ -e /etc/kubernetes/super-admin.conf ]; then chmod u-x,go-rwx /etc/kubernetes/super-admin.conf; fi

Properti

Sistem operasi
Apa saja
Tag
kubernetescontrol-planefile-permissions
Referensi
CIS Kubernetes Benchmark v2.1.0 - 1.1.13 Ensure that the default administrative credential file permissions are set to 600

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell
tmaegis scan --target kubernetes