DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
Rules and Groups employed by this XCCDF Profile
-
kubelet - Set Up Sysctl to Enable Protect Kernel Defaults - Check Parameter kernel.keys.root_maxbytes
<p> Setup required tuned kernel parameters before enabling overwritten protection. Note that depending on the Linux distribution and...Rule Medium Severity -
kubelet - Set Up Sysctl to Enable Protect Kernel Defaults - Check Parameter kernel.keys.root_maxkeys
<p> Setup required tuned kernel parameters before enabling overwritten protection. Note that depending on the Linux distribution and...Rule Medium Severity -
kubelet - Set Up Sysctl to Enable Protect Kernel Defaults - Check Parameter kernel.panic
<p> Setup required tuned kernel parameters before enabling overwritten protection. Note that depending on the Linux distribution and...Rule Medium Severity -
kubelet - Set Up Sysctl to Enable Protect Kernel Defaults - Check Parameter kernel.panic_on_oops
<p> Setup required tuned kernel parameters before enabling overwritten protection. Note that depending on the Linux distribution and...Rule Medium Severity -
kubelet - Set Up Sysctl to Enable Protect Kernel Defaults - Check Parameter vm.overcommit_memory
<p> Setup required tuned kernel parameters before enabling overwritten protection. Note that depending on the Linux distribution and...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.