Ensure that registry certificate file permissions are set to 444 or more restrictively

TinggiLevel 1Otomatisdocker

Deskripsi

Registry certificate files under /etc/docker/certs.d must have mode 444 or more restrictive. The audit lists files under /etc/docker/certs.d with permission bits outside 444; not applicable when /etc/docker/certs.d does not exist.

Cara pemeriksaan

Metode audit: Perintah shell

shell

out=$(find /etc/docker/certs.d -type f -perm /7333 2>/dev/null) || exit 1; [ -z "$out" ] && echo compliant || printf '%s\n' "$out"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Perintah shell

shell

find /etc/docker/certs.d -type f -exec chmod 444 {} +

Properti

Sistem operasi: Apa saja
Tag: dockerpermissionstls
Referensi: CIS Docker Benchmark v1.9.0 - 3.8 Ensure that registry certificate file permissions are set to 444 or more restrictively

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target docker