CIS Docker 1.12.0 V1.0.0 L1 Docker

Details https://docs.docker.com/articles/basics/#bind-docker-to-another-hostport-or-a-unix-socket 2.https://github.com/YungSang/fedora-atomic-packer/blob/master/oem/docker.socket 3.http://daviddaeschler.com/2014/12/14/centos-7rhel-7-and-docker-containers-on-boot/ Solution Step 1- Find out the file location-systemctl show -p FragmentPath docker.socketStep 2- If the file...

Details https://docs.docker.com/reference/commandline/cli/#daemon-socket-option 2.https://docs.docker.com/articles/basics/#bind-docker-to-another-hostport-or-a-unix-socket Solution chmod 660 /var/run/docker.sockThis would set the file permissions of the Docker socket file to ‘660’.Impact-None.Default Value-By...

Details Verify that the ‘/etc/default/docker’ file ownership and group-ownership is correctly set to ‘root’.’/etc/default/docker’ file contains sensitive parameters that may...

Details https://docs.docker.com/engine/admin/configuring/ Solution chmod 644 /etc/default/dockerThis would set the file permissions for this file to ‘644’.Impact-None.Default Value-This file may not...

Details Verify that the /etc/docker directory ownership and group-ownership is correctly set to ‘root’.’/etc/docker’ directory contains certificates and keys in...

Details Verify that the /etc/docker directory permissions are correctly set to ‘755’ or more restrictive.’/etc/docker’ directory contains certificates and keys...

Details Verify that all the registry certificate files (usually found under /etc/docker/certs.d/ directory) have permissions of ‘444’ or more restrictive./etc/docker/certs.d/...

Details https://docs.docker.com/articles/certificates/ 2.http://docs.docker.com/reference/commandline/cli/#insecure-registries Solution chown root-root /etc/docker/certs.d//*This would set the ownership and group-ownership for the registry certificate files to‘root’.Impact-None.Default Value-By...

Details https://docs.docker.com/articles/certificates/ 2.http://docs.docker.com/articles/https/ Solution chown root-root This would set the ownership and group-ownership for the TLS CA certificate file to...

Details https://docs.docker.com/articles/certificates/ 2.http://docs.docker.com/articles/https/ Solution chmod 444 This would set the file permissions of the TLS CA file to ‘444’.Impact-None.Default Value-By...