Details

Verify that the daemon.json file permissions are correctly set to 644 or more restrictive.

Rationale:

daemon.json file contains sensitive parameters that may alter the behavior of docker daemon. Hence, it should be writable only by root to maintain the integrity of the file.

Solution

chmod 644 /etc/docker/daemon.json
This would set the file permissions for this file to 644.
Impact:
None.
Default Value:
This file may not be present on the system. In that case, this recommendation is not applicable.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1726

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CSCv6|14.4

Source

• Tenable.com/audits