Details

http://wiki.apparmor.net/index.php/Main_Page

Solution

If AppArmor is applicable for your Linux OS, use it. You may have to follow below set of
steps-

1. Verify if AppArmor is installed. If not, install it.
2. Create or import a AppArmor profile for Docker containers.
3. Put this profile in enforcing mode.
4. Start your Docker container using the Docker AppArmor profile. For example,docker run -i -t –security-opt=’apparmor-PROFILENAME’ centos /bin/bash
Impact-The container (process) would have set of restrictions as defined in AppArmor profile. If
your AppArmor profile is mis-configured, then the container may not entirely work as
expected.Default Value-By default, no AppArmor profiles are applied on containers.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/514

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3(3)

Source

• Tenable.com/audits