Ensure that /etc/default/docker file ownership is set to root:root
Details Verify that the /etc/default/docker file ownership and group-ownership is correctly set to root. Rationale: /etc/default/docker file contains sensitive parameters...
- Home
- Security Hardening
- CIS Docker Community Edition V1.1.0 L1 Docker
CIS Docker Community Edition V1.1.0 L1 Docker
Ensure that /etc/default/docker file permissions are set to 644 or more restrictive
Details Verify that the /etc/default/docker file permissions are correctly set to 644 or more restrictive. Rationale: /etc/default/docker file contains sensitive...Ensure that /etc/docker directory ownership is set to root:root
Details Verify that the /etc/docker directory ownership and group-ownership is correctly set to root. Rationale: /etc/docker directory contains certificates and...Ensure that /etc/docker directory permissions are set to 755 or more restrictive
Details Verify that the /etc/docker directory permissions are correctly set to 755 or more restrictive. Rationale: /etc/docker directory contains certificates...Ensure that docker.service file permissions are set to 644 or more restrictive
Details Verify that the docker.service file permissions are correctly set to 644 or more restrictive. Rationale: docker.service file contains sensitive...Ensure that Docker socket file ownership is set to root:docker
Details Verify that the Docker socket file is owned by root and group-owned by docker. Rationale: Docker daemon runs as...Ensure that docker.socket file ownership is set to root:root
Details Verify that the docker.socket file ownership and group ownership is correctly set to root. Rationale: docker.socket file contains sensitive...Ensure that registry certificate file ownership is set to root:root
Details Verify that all the registry certificate files (usually found under /etc/docker/certs.d/ directory) are owned and group-owned by root. Rationale:...Ensure that registry certificate file permissions are set to 444 or more restrictive
Details Verify that all the registry certificate files (usually found under /etc/docker/certs.d/ directory) have permissions of 444 or more restrictive....Ensure that TLS CA certificate file ownership is set to root:root
Details Verify that the TLS CA certificate file (the file that is passed alongwith –tlscacert parameter) is owned and group-owned...