Verify that docker.socket file permissions are set to 644 or more restrictive
Details Verify that the ‘docker.socket’ file permissions are correctly set to ‘644’or more restrictive. Rationale: ‘docker.socket’ file contains sensitive parameters...
- Home
- Security Hardening
- CIS Docker 1.13.0 V1.0.0 L1 Docker
CIS Docker 1.13.0 V1.0.0 L1 Docker
Verify that Docker socket file permissions are set to 660 or more restrictive
Details Verify that the Docker socket file has permissions of ‘660’or more restrictive. Rationale: Only ‘root’ and members of ‘docker’...Verify that /etc/default/docker file ownership is set to root:root
Details Verify that the ‘/etc/default/docker’ file ownership and group-ownership is correctly set to ‘root’. Rationale: ‘/etc/default/docker’file contains sensitive parameters that...Verify that /etc/default/docker file permissions are set to 644 or more restrictive
Details Verify that the ‘/etc/default/docker’ file permissions are correctly set to ‘644’or more restrictive. Rationale: ‘/etc/default/docker’ file contains sensitive parameters...Verify that /etc/docker directory ownership is set to root:root
Details Verify that the /etc/docker directory ownership and group-ownership is correctly set to ‘root’. Rationale: ‘/etc/docker’ directory contains certificates and...Verify that /etc/docker directory permissions are set to 755 or more restrictive
Details Verify that the /etc/docker directory permissions are correctly set to ‘755’or more restrictive. Rationale: ‘/etc/docker’ directory contains certificates and...Verify that registry certificate file permissions are set to 444 or more restrictive
Details Verify that all the registry certificate files (usually found under/etc/docker/certs.d/directory) have permissions of ‘444’or more restrictive. Rationale: /etc/docker/certs.d/directory contains...Verify that registry certificate file ownership is set to root:root
Details Verify that all the registry certificate files (usually found under/etc/docker/certs.d/directory) are owned and group-owned by ‘root’. Rationale: /etc/docker/certs.d/directory contains...Verify that TLS CA certificate file ownership is set to root:root
Details Verify that the TLS CAcertificate file (the file that is passed alongwith ‘–tlscacert’parameter) is owned and group-owned by ‘root’....Verify that TLS CA certificate file permissions are set to 444 or more restrictive
Details Verify that the TLS CAcertificate file (the file that is passed alongwith ‘–tlscacert’parameter) has permissions of ‘444’or more restrictive....