4112-k8s-apiserver-ownership-k8s-apiserver file ownership is not set to root:root¶

Rule ID¶

• 4112-k8s-apiserver-ownership

Category¶

• nginx

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• If using nginx on a computer managed by systemd, verify that the nginx file ownership and group ownership are correctly set to root.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• Setting ownership to the root user and root group reduces the possibility of unauthorized modifications to nginx configuration files.

Risk Item¶

• nginx security

Audit Method¶

• Execute the following command to verify that the file and group are owned by root:

stat /etc/nginx

Remediation¶

• Execute the following command:

  #> chown -R root:root /etc/nginx
  

  This sets the file ownership and group ownership to root.

Impact¶

• None

Default Value¶

• The default ownership and group of nginx is root

References¶

• None

CIS Controls¶

• None