Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive

TinggiLevel 1Tinjauan manualkubernetes

Deskripsi

Ensure that Kubernetes PKI certificate files have permissions of 644 or more restrictive. The benchmark marks this recommendation Manual.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Run the below command (based on the file location on your system) on the Control Plane node. For example, stat -c '%a' /etc/kubernetes/pki/*.crt Verify that the permissions are 644 or more restrictive. or ls -l /etc/kubernetes/pki/*.crt Verify -rw------

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Run the below command (based on the file location on your system) on the Control Plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt

Properti

Sistem operasi: Apa saja
Tag: kubernetescontrol-planefile-permissions
Referensi: CIS Kubernetes Benchmark v2.1.0 - 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive