CIS Docker Benchmark

Ensure that Container Health is Checked at Runtime
 Profile Applicability: Level 1 Description: Docker containers should be configured to have their health checked at runtime to ensure the application...
Tue, 29 Apr, 2025 at 4:42 AM
Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively
Profile Applicability: Level 2 Description: The /etc/default/docker file, which contains configuration settings for the Docker daemon, should have it...
Tue, 29 Apr, 2025 at 5:37 AM
Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively
Profile Applicability: Level 2 Description: The /etc/sysconfig/docker file, which contains configuration parameters for the Docker daemon on certain ...
Tue, 29 Apr, 2025 at 5:43 AM
Ensure that Docker commands always make use of the latest version of their image
Profile Applicability: Level 1 Description: Docker commands should always use the latest version of the image to ensure that vulnerabilities are min...
Tue, 29 Apr, 2025 at 5:44 AM
Ensure that the /etc/sysconfig/docker file ownership is set to root:root
Profile Applicability: Level 2 Description: The /etc/sysconfig/docker file, which contains configuration parameters for Docker, should have its owner...
Tue, 29 Apr, 2025 at 5:50 AM
Ensure that the PIDs cgroup limit is used
Profile Applicability: Level 1  Description: The PIDs cgroup limit ensures that the number of processes in a container is controlled. Without this li...
Tue, 29 Apr, 2025 at 5:53 AM
Ensure that the Containerd socket file ownership is set to root:root
Profile Applicability: Level 1  Description: The containerd.socket file, used for communication between Docker and containerd, should have its owners...
Tue, 29 Apr, 2025 at 5:56 AM
Ensure that Docker's default bridge "docker0" is not used
Profile Applicability: Level 2 Description: The default bridge network docker0 creates a shared network between all containers, which may lead to se...
Tue, 29 Apr, 2025 at 6:01 AM
Ensure that the Host's User Namespaces are Not Shared
Profile Applicability: Level 1 Description: User namespaces provide a security mechanism that allows processes to have different user and group IDs ...
Tue, 29 Apr, 2025 at 6:09 AM
Ensure that the Containerd socket file permissions are set to 660 or more restrictively
Profile Applicability: Level 1 Description: The containerd.socket file, which allows communication between Docker and containerd, should have its per...
Tue, 29 Apr, 2025 at 6:32 AM