Ensure that File Integrity Operator is scanning the cluster
An XCCDF Rule
Description
The File Integrity Operator continually runs file integrity checks on the cluster nodes. It deploys a daemon set that initializes and runs privileged AIDE containers on each node, providing a status object with a log of files that are modified during the initial run of the daemon set pods.
warning alert: Warning
This rule's check operates on the cluster configuration dump.
Therefore, you need to use a tool that can query the OCP API, retrieve the
/apis/fileintegrity.openshift.io/v1alpha1/fileintegrities?limit=5 API endpoint to the local Rationale
File integrity scanning able to detect potential and unauthorised access.
- ID
- xccdf_org.ssgproject.content_rule_file_integrity_exists
- Severity
- Medium
- References
- Updated