make the kubelet cafile test posix compliant (#643)

aquasecurity · Jul 21, 2020 · 2a325bd · 2a325bd
1 parent 6669295
commit 2a325bd
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 9 deletions.
diff --git a/cfg/cis-1.3/node.yaml b/cfg/cis-1.3/node.yaml
@@ -458,9 +458,7 @@ groups:
         text: Ensure that the client certificate authorities file ownership is set to root:root (Scored)
         audit: |
           CAFILE=$(ps -ef | grep kubelet | grep -v apiserver | grep -- --client-ca-file= | awk -F '--client-ca-file=' '{print $2}' | awk '{print $1}')
-          if [[ -z $CAFILE ]]; then
-            CAFILE=$kubeletcafile
-          fi
+          if test -z $CAFILE; then CAFILE=$kubeletcafile; fi
           if test -e $CAFILE; then stat -c %U:%G $CAFILE; fi
         tests:
           test_items:

diff --git a/cfg/cis-1.4/node.yaml b/cfg/cis-1.4/node.yaml
@@ -449,9 +449,7 @@ groups:
         text: Ensure that the client certificate authorities file ownership is set to root:root (Scored)
         audit: |
           CAFILE=$(ps -ef | grep kubelet | grep -v apiserver | grep -- --client-ca-file= | awk -F '--client-ca-file=' '{print $2}' | awk '{print $1}')
-          if [[ -z $CAFILE ]]; then
-            CAFILE=$kubeletcafile
-          fi
+          if test -z $CAFILE; then CAFILE=$kubeletcafile; fi
           if test -e $CAFILE; then stat -c %U:%G $CAFILE; fi
         tests:
           test_items:

diff --git a/cfg/cis-1.5/node.yaml b/cfg/cis-1.5/node.yaml
@@ -119,9 +119,7 @@ groups:
         text: "Ensure that the client certificate authorities file ownership is set to root:root (Scored)"
         audit: |
           CAFILE=$(ps -ef | grep kubelet | grep -v apiserver | grep -- --client-ca-file= | awk -F '--client-ca-file=' '{print $2}' | awk '{print $1}')
-          if [[ -z $CAFILE ]]; then
-            CAFILE=$kubeletcafile
-          fi
+          if test -z $CAFILE; then CAFILE=$kubeletcafile; fi
           if test -e $CAFILE; then stat -c %U:%G $CAFILE; fi
         tests:
           test_items: