Skip to content

Verify Permissions on the pod log files

An XCCDF Rule

Description

All logs must be owned by root user and group and have permissions 755. By default, the path for the Kubernetes pod logs is

/var/log/pods/
.

Rationale

Pod log files may contain sensitive information such as application data, user credentials, or system configurations. Unauthorized access to these log files can expose sensitive data to malicious actors. By setting owner permissions, OpenShift ensures that only authorized users or processes with the necessary privileges can access the pod log files, preserving the confidentiality of the logged information.

ID
xccdf_org.ssgproject.content_rule_file_permissions_pod_logs
Severity
Medium
References
Updated