From 89f8e454ba7fce097868428187bc7983a76e1290 Mon Sep 17 00:00:00 2001
From: mustafa-rean <38005442+mustafa-rean@users.noreply.github.com>
Date: Wed, 22 Jan 2020 19:30:23 +0530
Subject: [PATCH] Resolved bug in master.yml for cis-1.5 for the apiserverbin
variable name (#567)
Co-authored-by: Liz Rice <liz@lizrice.com>
---
cfg/cis-1.5/master.yaml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/cfg/cis-1.5/master.yaml b/cfg/cis-1.5/master.yaml
index fc12468..7207685 100644
--- a/cfg/cis-1.5/master.yaml
+++ b/cfg/cis-1.5/master.yaml
@@ -734,7 +734,7 @@ groups:
- id: 1.2.21
text: "Ensure that the --profiling argument is set to false (Scored)"
- audit: "/bin/ps -ef | grep $apiserver | grep -v grep"
+ audit: "/bin/ps -ef | grep $apiserverbin | grep -v grep"
tests:
test_items:
- flag: "--profiling"
@@ -963,7 +963,7 @@ groups:
remediation: |
Edit the API server pod specification file $apiserverconf
on the master node and set the below parameter.
- --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+ --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256
scored: false
- id: 1.3
--
GitLab