Best practicesK8s controller-manager configuration file permissions are too permissive
Platform(s)
Non-platform specific
Compliance Frameworks
CCPA, CPRA, iso_27001_2022, iso_27002_2022, K8s CIS, Mitre ATT&CK, NIST 800-171, NIST 800-190, NIST 800-53, PDPA, STIG K8s, UK Cyber Essentials
Description
It was found that the K8s controller-manager configuration file's permissions are too broad. Setting the file's permissions to be permissive might allow low privileged user to modify the configuration file.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.