Best practices

K8s scheduler configuration file ownership is not set to root:root

Platform(s)

  • N/A

Compliance Frameworks

Description

It was found that the K8s scheduler configuration file's owner is not set to root. Setting the file's owner to a low privileged user allows the modification of the file by this user and expose the configuration file to unwanted modification.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.