CIS Docker 1.12.0 V1.0.0 L1.Linux

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html Solution Add a rule for Docker daemon.For example,Add the line as below line in /etc/audit/audit.rules file–w /usr/bin/docker -k...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html Solution If the file exists, add a rule for it.For example,Add the line as below in /etc/audit/audit.rules file–w...

Details Audit docker.socket, if applicable.Apart from auditing your regular Linux file system and system calls, audit all Docker related files...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html Solution Add a rule for /etc/default/docker file.For example,Add the line as below in /etc/audit/audit.rules file–w /etc/default/docker -k dockerThen,...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html Solution Add a rule for /etc/docker directory.For example,Add the line as below in /etc/audit/audit.rules file–w /etc/docker -k dockerThen,...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html 2.https://docs.docker.com/engine/reference/commandline/daemon/#daemon-configuration-file Solution Add a rule for /etc/docker/daemon.json file.For example,Add the line as below in /etc/audit/audit.rules file–w /etc/docker/daemon.json -k...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html 2.https://github.com/docker/docker/pull/20662 3.https://containerd.tools/ Solution Add a rule for /usr/bin/docker-containerd file.For example,Add the line as below in /etc/audit/audit.rules file–w /usr/bin/docker-containerd...

Details https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html 2.https://github.com/docker/docker/pull/20662 3.https://containerd.tools/ 4.https://github.com/opencontainers/runc Solution Add a rule for /usr/bin/docker-runc file.For example,Add the line as below in /etc/audit/audit.rules file–w...

Details Audit /var/lib/docker.Apart from auditing your regular Linux file system and system calls, audit all Docker related files and directories....

Details Security Risks and Benefits of Docker Application Containers 2.http://searchsdn.techtarget.com/feature/Docker-networking-How-Linux-containers-will-change-your-network Solution Periodically check your container inventory per host and clean...