Docker
TMA-DOCKER-5.1
Ensure swarm mode is not Enabled, if not needed
SrednjaNivo 1Automatskadocker
Opis
Swarm mode opens management ports and a raft store; it should be disabled when the host is not part of a swarm. The audit reads Swarm.LocalNodeState from docker info.
Kako se proverava
Metod provere: Komanda ljuske
shell
docker info --format '{{.Swarm.LocalNodeState}}'- Očekivani izlaz
inactive
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
If swarm mode is not needed, leave it with 'docker swarm leave' (managers: --force) after migrating services.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- dockerruntimeswarm
- Referenca
- CIS Docker Benchmark v1.9.0 - 5.1 Ensure swarm mode is not Enabled, if not needed
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target docker