CIS Docker Benchmark

Run the Docker daemon as a non-root user, if possible
Profile Applicability: Level 1 Description: Rootless Docker allows running both the Docker daemon and containers inside a user namespace, eliminatin...
Wed, 30 Apr, 2025 at 12:36 AM
Ensure network traffic is restricted between containers on the default bridge
Profile Applicability: Level 1 Description: By default, Docker allows all network traffic between containers on the same host using the default brid...
Wed, 30 Apr, 2025 at 12:37 AM
Ensure the logging level is set to 'info'
Profile Applicability: Level 1 Description: The default bridge network in Docker is a local network that allows containers to communicate with each o...
Mon, 28 Apr, 2025 at 2:23 AM
Ensure Docker is allowed to make changes to iptables
Profile Applicability: Level 1  Description: Docker requires the ability to modify iptables in order to create the necessary network rules for conta...
Mon, 28 Apr, 2025 at 2:29 AM
Ensure insecure registries are not used
Profile Applicability: Level 1  Description: Docker considers registries either secure or insecure. A secure registry uses TLS (Transport Layer Secur...
Mon, 28 Apr, 2025 at 2:35 AM
Ensure TLS authentication for Docker daemon is configured
Profile Applicability: Level 1  Description: It is possible to make the Docker daemon available remotely over a TCP port. If this is required, you sh...
Mon, 28 Apr, 2025 at 2:44 AM
Ensure TLS authentication for Docker daemon is configured
Profile Applicability: Level 1  Description: It is possible to make the Docker daemon available remotely over a TCP port. If this is required, you sh...
Mon, 28 Apr, 2025 at 2:52 AM
Ensure the default ulimit is configured appropriately
Profile Applicability: Level 1 Description: The ulimit value determines the maximum number of processes and file descriptors that can be opened by a ...
Mon, 28 Apr, 2025 at 3:01 AM
Enable user namespace support
Profile Applicability: Level 2  Description: User namespace support should be enabled in the Docker daemon to utilize container user-to-host user rem...
Mon, 28 Apr, 2025 at 3:08 AM
Ensure the default cgroup usage has been confirmed
Profile Applicability: Level 2  Description: The default cgroup driver should be confirmed and aligned with the system's cgroup management settin...
Mon, 28 Apr, 2025 at 3:14 AM