{ “id”: “3.2.2”, “text”: “Ensure that the audit policy covers key security concerns (Manual)”, “audit”: “audit_policy_file=\((ps -ef | grep apiserver | grep -- --audit-policy-file= | awk -F '--audit-policy-file=' '{print \)2}’ | awk ‘{print \(1}'); if [[ -n \)audit_policy_file ]]; then cat $audit_policy_file; fi”, “tests”: {
"test_items": [{"flag": "","compare": {"op": "valid_elements","value": "secrets,configmaps,tokenreviews,pods,deployments,pods/exec,pods/portforward,pods/proxy,services/proxy"}}]
},
“remediation”: “Consider modification of the audit policy in use on the cluster to include these items, at a minimum.”,
“scored”: false
}
内容由零声教学AI助手提供，问题来源于学员提问
