Ensure that docker exec commands are not used with the privileged option

YüksekDüzey 2Manuel incelemedocker

Açıklama

You should not use docker exec with the --privileged option. Using the --privileged option in docker exec commands gives extended Linux capabilities to the command. This could potentially be an insecure practice, particularly when you are running containers with reduced ... Reported as a manual review item: the audit needs a site-specific judgement.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

If you have auditing enabled as recommended in Section 1, you can use the command below to filter out docker exec commands that use the --privileged option. ausearch -k docker | grep exec | grep privileged Expected state: You should not use the --privileged option in docker exec commands.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

You should not use the --privileged option in docker exec commands.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: dockermanual
Referans: CIS Docker Benchmark v1.9.0 - 5.23 Ensure that docker exec commands are not used with the privileged option