Audit docker daemon
Details Audit all Docker daemon activities. Rationale: Apart from auditing your regular Linux file system and system calls, audit Docker...
- Home
- Security Hardening
- CIS Docker 1.13.0 V1.0.0 L1.Linux
CIS Docker 1.13.0 V1.0.0 L1.Linux
Audit Docker files and directories – docker.service
Details Audit docker.service,if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker related...Audit Docker files and directories – docker.socket
Details Audit docker.socket,if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker related...Audit Docker files and directories – /etc/default/docker
Details Audit /etc/default/docker, if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker...Audit Docker files and directories – /etc/docker
Details Audit /etc/docker. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker related files...Audit Docker files and directories – /etc/docker/daemon.json
Details Audit /etc/docker/daemon.json, if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker...Audit Docker files and directories – /usr/bin/docker-containerd
Details Audit /usr/bin/docker-containerd, if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker...Audit Docker files and directories – /usr/bin/docker-runc
Details Audit /usr/bin/docker-runc, if applicable. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker...Audit Docker files and directories – /var/lib/docker
Details Audit /var/lib/docker. Rationale: Apart from auditing your regular Linux file system and system calls, audit all Docker related files...Avoid container sprawl
Details Do not keep a large number of containers on the same host. Rationale: The flexibility of containers makes it...