# CKS-008 — Correct manifest ownership

Domain: **1.2 CIS benchmark review**  
Time: **2 minutes** · Reward: **100 XP + topic bonus**

## Task

On `controlplane`, check `1.1.4` fails:

```text
/etc/kubernetes/manifests/kube-scheduler.yaml  mode=0600 owner=root group=adm
```

Required commands:

- back up outside the manifest directory;
- change ownership to `root:root` without changing mode;
- verify numeric mode and `owner:group`;
- rerun only master check `1.1.4`.

## Section B — scored answer

```bash
# Your four commands
```

Say **Grade CKS-008** when saved.