Container-Optimized OS
TMA-COS-1.6
Ensure AppArmor is installed
SedangLevel 1Tinjauan manualcos
Deskripsi
SELinux and AppArmor provide Mandatory Access Controls. Without a Mandatory Access Control system installed only the default Discretionary Access Control system will be available.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Verify that AppArmor is installed with the following command: # grep '\"name\": \"apparmor\"' /etc/cos-package-info.json "name": "apparmor",
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Update to an OS image that includes the the apparmor package.
Properti
- Sistem operasi
- Apa saja
- Tag
- container-optimized-oscos
- Referensi
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.6 Ensure AppArmor is installed