search

rancherfederal / rke2-ansible

RKE2 cluster provisioning via Ansible.
Apache License 2.0
206 stars 123 forks source link

Secure files that get generated via ansible #243

Open aleiner opened 1 month ago

aleiner commented 1 month ago

https://www.stigviewer.com/stig/rancher_government_solutions_rke2/2022-10-13/finding/V-254564

aleiner commented 1 month ago

Currently don't pass the following:

  1. Ensure correct permissions of each file in /var/lib/rancher/rke2/data cd /var/lib/rancher/rke2/data ls -l

all owners are root:root all files are 0640

  1. Ensure correct permissions of /var/lib/rancher/rke2/server cd /var/lib/rancher/rke2/server ls -l

The following directories are set to 0750 manifests logs