Ensure that containers use trusted base images
Details Ensure that the container image is written either from scratch or is based on another established and trusted base...
- Home
- Security Hardening
- CIS Docker Community Edition V1.1.0 L1 Docker
CIS Docker Community Edition V1.1.0 L1 Docker
Ensure that daemon.json file ownership is set to root:root
Details Verify that the daemon.json file ownership and group-ownership is correctly set to root. Rationale: daemon.json file contains sensitive parameters...Ensure that daemon.json file permissions are set to 644 or more restrictive
Details Verify that the daemon.json file permissions are correctly set to 644 or more restrictive. Rationale: daemon.json file contains sensitive...Ensure that Docker server certificate file ownership is set to root:root
Details Verify that the Docker server certificate file (the file that is passed alongwith –tlscert parameter) is owned and group-owned...Ensure that Docker server certificate file permissions are set to 444 or more restrictive
Details Verify that the Docker server certificate file (the file that is passed alongwith –tlscert parameter) has permissions of 444...Ensure that Docker server certificate key file ownership is set to root:root
Details Verify that the Docker server certificate key file (the file that is passed alongwith –tlskey parameter) is owned and...Ensure that Docker server certificate key file permissions are set to 400
Details Verify that the Docker server certificate key file (the file that is passed alongwith –tlskey parameter) has permissions of...Ensure that docker.service file ownership is set to root:root
Details Verify that the docker.service file ownership and group-ownership are correctly set to root. Rationale: docker.service file contains sensitive parameters...Ensure that docker.socket file permissions are set to 644 or more restrictive
Details Verify that the docker.socket file permissions are correctly set to 644 or more restrictive. Rationale: docker.socket file contains sensitive...Ensure that Docker socket file permissions are set to 660 or more restrictive
Details Verify that the Docker socket file has permissions of 660 or more restrictive. Rationale: Only root and members of...