Ensure the container host has been Hardened

СреднийУровень 1Ручная проверкаdocker

Описание

A container host is able to run one or more containers. It is of utmost importance to harden the host to mitigate host security misconfiguration. You should follow infrastructure security best practices and harden your host OS. Keeping the host system hardened will ensure that host vulnerabilities are mitigated. Reported as a manual review item: the audit needs a site-specific judgement.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Ensure that the host specific security guidelines are followed. Ask the system administrators which security benchmark the current host system should currently be compliant with and check that security standards associated with this standard are currently in place.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

You may consider various CIS Security Benchmarks for your container host. If you have other security guidelines or regulatory requirements to adhere to, please follow them as suitable in your environment.

Свойства

Операционные системы: Любая
Теги: dockermanual
Источник: CIS Docker Benchmark v1.9.0 - 1.2.1 Ensure the container host has been Hardened