Verify Permissions on the OpenShift Node Service File
An XCCDF Rule
Description
To properly set the permissions of /etc/systemd/system/kubelet.service, run the command:
$ sudo chmod 0644 /etc/systemd/system/kubelet.service
Rationale
If the /etc/systemd/system/kubelet.service
file is writable by a group-owner or the
world the risk of its compromise is increased. The file contains the service configuration of the
OpenShift node service that is configured on the system. Protection of this file is
critical for OpenShift security.
- ID
- xccdf_org.ssgproject.content_rule_file_permissions_worker_service
- Severity
- Medium
- References
- Updated