From 34e033f59e4a6a5d6f6929e38520a80cb72889b0 Mon Sep 17 00:00:00 2001 From: Manuel Alejandro de Brito Fontes Date: Fri, 2 Oct 2020 21:21:41 -0300 Subject: [PATCH] Update hardening guide doc --- docs/deploy/hardening-guide.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/deploy/hardening-guide.md b/docs/deploy/hardening-guide.md index de3464511..51cd39265 100644 --- a/docs/deploy/hardening-guide.md +++ b/docs/deploy/hardening-guide.md @@ -36,8 +36,8 @@ This guide refers to chapters in the CIS Benchmark. For full explanation you sho | ||| | | __2.1 Minimize NGINX Modules__||| | | 2.1.1 Ensure only required modules are installed (Not Scored) | OK | Already only needed modules are installed, however proposals for further reduction are welcome | | -| 2.1.2 Ensure HTTP WebDAV module is not installed (Scored) | RISK TO BE ACCEPTED | It is installed, see compile options [here](https://github.com/kubernetes/ingress-nginx/blob/master/images/nginx/rootfs/build.sh#L445). Disabling that would require building own image for nginx ingress controller. The effort is too high in comparison to the achieved effect | | -| 2.1.3 Ensure modules with gzip functionality are disabled (Scored)| RISK TO BE ACCEPTED | See previous answer | | +| 2.1.2 Ensure HTTP WebDAV module is not installed (Scored) | OK | | | +| 2.1.3 Ensure modules with gzip functionality are disabled (Scored)| OK | | | | 2.1.4 Ensure the autoindex module is disabled (Scored)| OK | No autoindex configs so far in ingress defaults| | | ||| | | __2.2 Account Security__||| |