This message was deleted.

It might be checking incorrect locations. See results here: https://docs.rke2.io/security/cis_self_assessment123#117

```stat -c %a /var/lib/rancher/rke2/agent/pod-manifests/etcd.yaml

644```

(and the respective other locations). We don’t have a self assessment out for cis-1.7 at the moment, but the checks and requirements for these are the same.

Ok, thanks!