Skip to content

Verify User Who Owns The Kubelet Configuration File

An XCCDF Rule

Description

To properly set the owner of /var/lib/kubelet/config.json, run the command:

$ sudo chown root /var/lib/kubelet/config.json 

Rationale

The kubelet configuration file contains information about the configuration of the OpenShift node that is configured on the system. Protection of this file is critical for OpenShift security.

ID
xccdf_org.ssgproject.content_rule_file_owner_kubelet
Severity
Medium
References
Updated