{ “id”: “4.1.3”, “text”: “If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)”, “audit”: “/bin/sh -c ‘if test -e \(proxykubeconfig; then stat -c permissions=%a \)proxykubeconfig; fi’”, “tests”: {
"bin_op": "or",
"test_items": [
{
"flag": "permissions",
"set": true,
"compare": {
"op": "bitmask",
"value": "644"
}
},
{
"flag": "$proxykubeconfig",
"set": false
}
]
},
“remediation”: “\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 $proxykubeconfig\n”,
“scored”: false
}
内容由零声教学AI助手提供,问题来源于学员提问




