Docker
TMA-DOCKER-1.2.1
Ensure the container host has been Hardened
Description
A container host is able to run one or more containers. It is of utmost importance to harden the host to mitigate host security misconfiguration. You should follow infrastructure security best practices and harden your host OS. Keeping the host system hardened will ensure that host vulnerabilities are mitigated. Reported as a manual review item: the audit needs a site-specific judgement.
How it is checked
Audit method: Manual review
Ensure that the host specific security guidelines are followed. Ask the system administrators which security benchmark the current host system should currently be compliant with and check that security standards associated with this standard are currently in place.
How it is fixed
Fix method: Guidance or infrastructure patch
You may consider various CIS Security Benchmarks for your container host. If you have other security guidelines or regulatory requirements to adhere to, please follow them as suitable in your environment.
Properties
- Operating systems
- Any
- Tags
- dockermanual
- Reference
- CIS Docker Benchmark v1.9.0 - 1.2.1 Ensure the container host has been Hardened