From 9c563b0987627a984e8a739d7b770d4d9573c74f Mon Sep 17 00:00:00 2001
From: Abubakr-Sadik Nii Nai Davis <dwa2pac@gmail.com>
Date: Sun, 6 Aug 2017 16:37:22 +0000
Subject: [PATCH] Remove misleading comment about manual checks in node check
definition.
---
cfg/node.yaml | 2 --
1 file changed, 2 deletions(-)
diff --git a/cfg/node.yaml b/cfg/node.yaml
index 94e48f7..346ddd1 100644
--- a/cfg/node.yaml
+++ b/cfg/node.yaml
@@ -285,7 +285,6 @@ groups:
\nFor example, chown root:root $proxyconf"
scored: true
-# TODO: provide flag to WARN about manual checks.
- id: 2.2.7
text: "Ensure that the certificate authorities file permissions are set to
644 or more restrictive (Scored)"
@@ -298,7 +297,6 @@ groups:
\nchmod 644 <filename>"
scored: true
-# TODO: provide flag to WARN about manual checks.
- id: 2.2.8
text: "Ensure that the client certificate authorities file ownership is set to root:root"
audit: "if test -e $ca-file; then stat -c %U:%G $ca-file; fi"
--
GitLab