Detections
Analytics

3.1.3 Ensure that the kubelet configuration file has permissions set to 644

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Ensure that if the kubelet configuration file exists, it has permissions of 644.

The kubelet reads various parameters, including security settings, from a config file specified by the --config argument. If this file exists, you should restrict its file permissions to maintain the integrity of the file. The file should be writable by only the administrators on the system.

Solution

Run the following command (using the kubelet config file location):

chmod 644 <kubelet_config_file>

Impact:

Overly permissive file access increases the security risk to the platform.

See Also

https://workbench.cisecurity.org/benchmarks/24112

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|5.2

Plugin: Unix

Control ID: 77e5fc14b75050237838f49f50befbb32d574c72a05c7817f5e715f009671bc4