Detections
Analytics

4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive

Information

Ensure that the certificate authorities file has permissions of 644 or more restrictive.

The certificate authorities file controls the authorities used to validate API requests. You should restrict its file permissions to maintain the integrity of the file. The file should be writable by only the administrators on the system.

Solution

Run the following command to modify the file permissions of the --client-ca-file

chmod 644 <filename>

Impact:

None

See Also

https://workbench.cisecurity.org/benchmarks/26831

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: fc34126433a52202ebb877387e572bbcc4805168ccd8643f1edaba620d56cd17