Details
https://docs.docker.com/engine/reference/commandline/daemon/
Solution
The default setting is good enough and can be left as-is. If you want to specifically set a non-default cgroup, pass –cgroup-parent parameter to the docker daemon when starting it.
For Example,
docker daemon –cgroup-parent=/foobar
Impact-
None.Default Value-
By default, docker daemon uses /docker for fs cgroup driver and system.slice for systemd cgroup driver.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.