From f8b2f6c841df253c062df62cd18b7b81a4df527e Mon Sep 17 00:00:00 2001
From: Liz Rice <liz@lizrice.com>
Date: Wed, 7 Aug 2019 17:17:21 +0100
Subject: [PATCH] Correct 1.4.21 text (#356)
1.4.21 is about the PKI key file not the certificate
---
cfg/1.13/master.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/cfg/1.13/master.yaml b/cfg/1.13/master.yaml
index 13ee16e..3662a06 100644
--- a/cfg/1.13/master.yaml
+++ b/cfg/1.13/master.yaml
@@ -1223,7 +1223,7 @@ groups:
scored: true
- id: 1.4.21
- text: "Ensure that the Kubernetes PKI certificate file permissions are set to 600 or more restrictive (Scored)"
+ text: "Ensure that the Kubernetes PKI key file permissions are set to 600 or more restrictive (Scored)"
audit: "stat -c %n\ %a /etc/kubernetes/pki/*.key"
type: "manual"
tests:
--
GitLab