Verify Group Who Owns the Worker Certificate Authority File
An XCCDF Rule
Description
To properly set the group owner of /etc/kubernetes/kubelet-ca.crt, run the command:
$ sudo chgrp root /etc/kubernetes/kubelet-ca.crt
Rationale
The worker certificate authority file contains the certificate authority certificate for an OpenShift node that is configured on the system. Protection of this file is critical for OpenShift security.
- ID
- xccdf_org.ssgproject.content_rule_file_groupowner_worker_ca
- Severity
- Medium
- References
- Updated