TMA-KUBERNETES-1.1.20
Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive
Açıklama
Ensure that Kubernetes PKI certificate files have permissions of 644 or more restrictive. The benchmark marks this recommendation Manual.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Run the below command (based on the file location on your system) on the Control Plane node. For example, stat -c '%a' /etc/kubernetes/pki/*.crt Verify that the permissions are 644 or more restrictive. or ls -l /etc/kubernetes/pki/*.crt Verify -rw------
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Run the below command (based on the file location on your system) on the Control Plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- kubernetescontrol-planefile-permissions
- Referans
- CIS Kubernetes Benchmark v2.1.0 - 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive