Restrict access to create and modify the Virtual Machine Cluster Instance and Preference Types

보통레벨 1수동 검토openshift-virt

설명

An instance type is a reusable object used to create VMs with sane defaults based on the desired type of VM. Since the object is used to create instances of VMs in the entire cluster, its creation and update needs to be carefully and securely managed. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Check who has the ability to create InstanceTypes with the following command: $ oc adm policy who - can create,update virtualmachineclusterinstancetypes

조치 방법

조치 방식: 가이드 또는 인프라 패치

Assign create and update access only to approved virtualmachineclusterinstancetypes objects in the cluster. Remove the create and update permission from users who are not authorized to perform the actions.

속성

운영 체제: 모두
태그: openshift-virtmanual-review
참고 자료: CIS Red Hat OpenShift Virtual Machine Extension Benchmark v1.0.0 - 1.13 Restrict access to create and modify the Virtual Machine Cluster Instance and Preference Types