Details

https://docs.docker.com/engine/reference/commandline/exec/

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Do not use –user option in docker exec command.Impact-None.Default Value-By default, docker exec command runs without –user option.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/517

This control applies to the following type of system Unix.

Source

• Tenable.com/audits