containernetworking / plugins

Some reference and example networking plugins, maintained by the CNI team.
Apache License 2.0
2.23k stars 788 forks source link

Create IPAM files with 0600 permissions #950

Closed ricky-rav closed 1 year ago

ricky-rav commented 1 year ago

Conform to CIS Benchmarks "1.1.9 Ensure that the Container Network Interface file permissions are set to 600 or more restrictive" https://www.tenable.com/audits/items/CIS_Kubernetes_v1.20_v1.0.1_Level_1_Master.audit:f1717a5dd65d498074dd41c4a639e47d

https://issues.redhat.com/browse/OCPBUGS-16788

mccv1r0 commented 1 year ago

/lgtm

s1061123 commented 1 year ago

/lgtm

openshift-merge-robot commented 1 year ago

Fix included in accepted release 4.15.0-0.nightly-2023-11-08-062604