Skip to content
ATO Pathways
  Log In

BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4

Rules and Groups employed by this XCCDF Profile

  • Ensure no ClusterRoleBindings set for default Service Account

    Using the <code>default</code> service account prevents accurate application rights review and audit tracing. Instead of <code>default</code>, crea...
    Rule Medium Severity
    Show

  • Ensure no RoleBindings set for default Service Account

    Using the <code>default</code> service account prevents accurate application rights review and audit tracing. Instead of <code>default</code>, crea...
    Rule Medium Severity
    Show

  • OpenShift - Confinement

    Contains evaluations to configure and assess the confinement of the cluster's applications and workloads.
    Group
    Show

  • Make sure the Security Profiles Operator is installed

    Security Profiles Operator provides a way to define secure computing (seccomp) profiles and SELinux profiles as custom resources that are syncrhoni...
    Rule Medium Severity
    Show

  • Configure Recurring Backups For etcd

    <p> Back up your clusters etcd data regularly and store in a secure location ideally outside the OpenShift Container Platform enviro...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules