Skip to content

Verify User Who Owns The OpenShift etcd Data Directory

An XCCDF Rule

Description

To properly set the owner of /var/lib/etcd, run the command:

$ sudo chown root /var/lib/etcd 

Rationale

The /var/lib/etcd directory contains highly-available distributed key/value data storage across an OpenShift cluster. Allowing access to users to this directory could compromise OpenShift data and the cluster.

ID
xccdf_org.ssgproject.content_rule_file_owner_var_lib_etcd
Severity
Medium
References
Updated