Ensure that docker exec commands are not used with the privileged option

높음레벨 2수동 검토docker

설명

You should not use docker exec with the --privileged option. Using the --privileged option in docker exec commands gives extended Linux capabilities to the command. This could potentially be an insecure practice, particularly when you are running containers with reduced ... Reported as a manual review item: the audit needs a site-specific judgement.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

If you have auditing enabled as recommended in Section 1, you can use the command below to filter out docker exec commands that use the --privileged option. ausearch -k docker | grep exec | grep privileged Expected state: You should not use the --privileged option in docker exec commands.

조치 방법

조치 방식: 가이드 또는 인프라 패치

You should not use the --privileged option in docker exec commands.

속성

운영 체제: 모두
태그: dockermanual
참고 자료: CIS Docker Benchmark v1.9.0 - 5.23 Ensure that docker exec commands are not used with the privileged option