4.1.7 Ensure that the certificate authorities file permissions are set to 600 or more restrictive

Information

Ensure that the certificate authorities file has permissions of 600 or more restrictive.

Rationale:

The certificate authorities file controls the authorities used to validate API requests. You should restrict its file permissions to maintain the integrity of the file. The file should be writable by only the administrators on the system.

Impact:

None

Solution

Run the following command to modify the file permissions of the --client-ca-file

chmod 600 <filename>

Default Value:

By default no --client-ca-file is specified.

See Also

https://workbench.cisecurity.org/files/4111