Docker
TMA-DOCKER-SOCK-PERMS
Ensure docker.sock is owned by root:docker with mode 660
HighLevel 1Automateddocker
Description
Limits who can control the Docker daemon.
How it is checked
Audit method: Shell command
shell
stat -Lc '%a %U %G' /var/run/docker.sock- Expected output
660 root docker
How it is fixed
Fix method: Shell command
shell
chown root:docker /var/run/docker.sock && chmod 660 /var/run/docker.sockProperties
- Operating systems
- Any
- Tags
- docker
- Reference
- CIS Docker Benchmark - Docker daemon configuration files / socket permissions
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target docker