Ensure that the swarm manager auto-lock key is rotated periodically

낮음레벨 1수동 검토docker

설명

You should rotate the swarm manager auto-lock key periodically. The swarm manager auto-lock key is not automatically rotated. Good security practice is to rotate keys. Reported as a manual review item: the audit needs a site-specific judgement.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Currently, there is no mechanism to find out when the key was last rotated on a swarm manager node. You should check with the system administrator to see if there is a key rotation process, and how often the key is rotated.

조치 방법

조치 방식: 가이드 또는 인프라 패치

You should run the command below to rotate the keys: docker swarm unlock-key --rotate Additionally, to facilitate auditing of this recommendation, you should maintain key rotation records and ensure that you establish a pre-defined frequency for key rotation.

속성

운영 체제: 모두
태그: dockermanual
참고 자료: CIS Docker Benchmark v1.9.0 - 7.6 Ensure that the swarm manager auto-lock key is rotated periodically