Verify Group Who Owns The Worker Kubeconfig File
An XCCDF Rule
Description
To properly set the group owner of /var/lib/kubelet/kubeconfig, run the command:
$ sudo chgrp root /var/lib/kubelet/kubeconfig
Rationale
The worker kubeconfig file contains information about the administrative configuration of the OpenShift cluster that is configured on the system. Protection of this file is critical for OpenShift security.
- ID
- xccdf_org.ssgproject.content_rule_file_groupowner_worker_kubeconfig
- Severity
- Medium
- References
- Updated