Detections
Analytics

7.1 Ensure appropriate key file permissions are set

Information

In the Shared Cluster, the certificate or keyfile is utilized for authentications. Implementing proper file permissions on the certificate or keyfile will prevent unauthorized access to it.

Protecting the certificate/keyfile strengthens authentication in the sharded cluster and prevents unauthorized access to the MongoDB database.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set the keyFile ownership to mongodb user and remove other permissions by executing these commands:

chmod 600 /keyfile
sudo chown mongodb:mongodb /keyfile

See Also

https://workbench.cisecurity.org/benchmarks/27511

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|IA-5(1), 800-53|SC-28, 800-53|SC-28(1), CSCv7|16.4

Plugin: Unix

Control ID: 99704df16a1ae6420a7e0ae0ccda4aceae1fe273ed036ff654cac5b1e83588b4