Verify Group Who Owns The OpenShift Node Service File
An XCCDF Rule
Description
'
To properly set the group owner of /etc/systemd/system/kubelet.service, run the command:
$ sudo chgrp root /etc/systemd/system/kubelet.service'
Rationale
The /etc/systemd/system/kubelet.service
file contains information about the configuration of the
OpenShift node service that is configured on the system. Protection of this file is
critical for OpenShift security.
- ID
- xccdf_org.ssgproject.content_rule_file_groupowner_worker_service
- Severity
- Medium
- References
- Updated