CIS Docker Benchmark

Ensure that the Docker server certificate key file ownership is set to root:root
Profile Applicability: Level 1  Description: The Docker server certificate key file, which is used for secure TLS communication between the Docker cl...
Tue, 29 Apr, 2025 at 3:04 AM
Ensure that the Docker server certificate key file permissions are set to 400
Profile Applicability: Level 1 Description: The Docker server certificate key file, which is used for secure TLS communication between the Docker cli...
Tue, 29 Apr, 2025 at 3:07 AM
Ensure that management plane traffic is separated from data plane traffic
Profile Applicability: Level 1 Description: You should separate management plane traffic from data plane traffic. This ensures that the management f...
Tue, 29 Apr, 2025 at 3:17 AM
Ensure that the Docker socket file ownership is set to root:docker
Profile Applicability: Level 1  Description: The docker.socket file, which allows communication between the Docker client and Docker daemon, should h...
Tue, 29 Apr, 2025 at 3:12 AM
Ensure that the Docker socket file permissions are set to 660 or more restrictively
Profile Applicability: Level 1 Description: The docker.socket file, which allows communication between the Docker client and Docker daemon, should ha...
Tue, 29 Apr, 2025 at 3:28 AM
Ensure that the daemon.json file ownership is set to root:root
Profile Applicability: Level 2 Description: The daemon.json file, which contains configuration settings for the Docker daemon, should have its owners...
Tue, 29 Apr, 2025 at 3:32 AM
Ensure that the /etc/default/docker file ownership is set to root:root
Profile Applicability: Level 2 Description: The /etc/default/docker file contains configuration parameters used by the Docker daemon. It is important...
Tue, 29 Apr, 2025 at 3:36 AM
Ensure that CA certificates are rotated as appropriate
Profile Applicability: Level 1 Description: Certificate Authorities (CAs) are trusted entities that issue digital certificates used to verify the ide...
Tue, 29 Apr, 2025 at 4:05 AM
Ensure that cgroup usage is confirmed
Profile Applicability: Level 1 Description: The control group (cgroup) is a Linux kernel feature that limits, accounts for, and isolates the resource...
Tue, 29 Apr, 2025 at 4:26 AM
Ensure that the Container is Restricted from Acquiring Additional Privileges
 Profile Applicability: Level 1  Description: Containers should be restricted from acquiring additional privileges beyond what is required. This can ...
Tue, 29 Apr, 2025 at 4:37 AM