Skip to content

0304-docker-registry-ownership-registry.service file ownership not set to root:root

Rule ID

  • 0304-docker-registry-ownership

Category

  • container

Level

  • warn

Compatible Versions

  • Linux

Description

  • If you are using Docker on a system managed by systemd, verify that the Docker registry.service file ownership and group ownership are correctly set to root.

Scan Frequency

  • 0 */30 * * *

Rationale

  • The docker.service file contains sensitive parameters that may change the behavior of the Docker daemon. Therefore, it should be owned by root, and the group should be root to maintain file integrity.

Risk

  • Container Security

Audit

  • Execute the following command to verify that the file and group are owned by root:
stat -c %U:%G /usr/lib/systemd/system/docker.service | grep -v root:root

The above command should return nothing.

Remediation

  • Execute the following command:
#> chown root:root /usr/lib/systemd/system/docker.service

This sets the file ownership and group ownership to root.

Impact

  • None

Default Value

  • This file may not exist on the system. If it does not exist, this recommendation is not applicable. By default, if the file exists, the ownership and group ownership of this file will be correctly set to root.

References

CIS Controls

  • None

Feedback

Is this page helpful?