CIS_Docker_Community_Edition_Benchmark_v1.1.0.pdf

CIS_Docker_Community_Edition_Benchmark_v1.1.0.pdf
Docker通用安全设置装备摆设指南。
Conventions.........................................................................................................................9ScoringInformation........................................................................................................................................9ProfileDefinitions.........................................................................................................................................10Acknowledgements......................................................................................................................................11Recommendations.............................................................................................................................................121HostConfiguration....................................................................................................................................121.1Ensureaseparatepartitionforcontainershasbeencreated(Scored)..................121.2EnsurethecontainerhosthasbeenHardened(NotScored)......................................141.3EnsureDockerisuptodate(NotScored)..........................................................................161.4EnsureonlytrustedusersareallowedtocontrolDockerdaemon(Scored)........181.5Ensureauditingisconfiguredforthedockerdaemon(Scored)................................201.6EnsureauditingisconfiguredforDockerfilesanddirectories-/var/lib/docker(Scored)...................................................................................................................................................221.7EnsureauditingisconfiguredforDockerfilesanddirectories-/etc/docker(Scored)...................................................................................................................................................241.8EnsureauditingisconfiguredforDockerfilesanddi 本软件ID:11794816