Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Restrict safe_guard file permissions #607

Merged
merged 1 commit into from
Apr 4, 2023
Merged

Restrict safe_guard file permissions #607

merged 1 commit into from
Apr 4, 2023

Conversation

AleksandarSavchev
Copy link
Member

What this PR does / why we need it:
This PR changes the file permissions of safe_guard file from 644 to 600. The etcd pods must have file permissions set to 600 or more restrictive.
This PR is in sync with Kubernetes' STIG.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

Restrict the file permissions of `safe_guard` file from 644 to 600.

@AleksandarSavchev AleksandarSavchev requested a review from a team as a code owner March 30, 2023 15:05
@gardener-robot gardener-robot added needs/review Needs review size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) labels Mar 30, 2023
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Mar 30, 2023
shreyas-s-rao
shreyas-s-rao approved these changes Apr 4, 2023
View reviewed changes
Copy link
Collaborator

@shreyas-s-rao shreyas-s-rao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-robot gardener-robot added reviewed/lgtm Has approval for merging and removed needs/review Needs review labels Apr 4, 2023
@shreyas-s-rao shreyas-s-rao merged commit d5c31ac into gardener:master Apr 4, 2023
@gardener-robot gardener-robot added the status/closed Issue is closed (either delivered or triaged) label Apr 4, 2023
@gardener-robot-ci-2 gardener-robot-ci-2 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Apr 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@shreyas-s-rao shreyas-s-rao shreyas-s-rao approved these changes

Assignees
No one assigned
Labels
needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) reviewed/lgtm Has approval for merging reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) status/closed Issue is closed (either delivered or triaged)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@AleksandarSavchev @shreyas-s-rao @gardener-robot-ci-2 @gardener-robot-ci-3 @gardener-robot