TMA-DOCKER-5.24

Ensure that docker exec commands are not used with the user=root option

높음레벨 2수동 검토docker

설명

You should not use docker exec with the --user=root option. Using the --user=root option in a docker exec command, executes it within the container as the root user. This could potentially be insecure, particularly when you are running containers with reduced capabilities or ... Reported as a manual review item: the audit needs a site-specific judgement.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

If you have auditing enabled as recommended in Section 1, you can use the command below to filter out docker exec commands that use the --user=root option. ausearch -k docker | grep exec | grep user Expected state: You should not use the --user=root option in docker exec commands.

조치 방법

조치 방식: 가이드 또는 인프라 패치

You should not use the --user=root option in docker exec commands.

속성

운영 체제: 모두
태그: dockermanual
참고 자료: CIS Docker Benchmark v1.9.0 - 5.24 Ensure that docker exec commands are not used with the user=root option