Skip to content

0306-docker-socket-ownership - docker.socket file ownership is not set to root:root

Rule ID

  • 0306-docker-socket-ownership

Category

  • container

Level

  • warn

Compatible Versions

  • Linux

Description

  • If you are using Docker on a machine managed by systemd, verify that the docker.socket file ownership and group ownership are correctly set to root.

Scan Frequency

  • 0 */30 * * *

Rationale

  • The docker.socket file contains sensitive parameters that can alter the behavior of the Docker remote API. Therefore, it should be owned by root and the group should be root to maintain file integrity.

Risk Item

  • Container Security

Audit Method

  • Execute the following command to verify that the file and group are owned by root:
stat -c %U:%G /usr/lib/systemd/system/docker.socket | grep -v root:root

The above command should return no output.

Remediation

  • Execute the following command:
#> chown root:root /usr/lib/systemd/system/docker.socket

This sets the file ownership and group ownership to root.

Impact

  • None

Default Value

  • This file may not exist on the system. In that case, this recommendation does not apply. By default, if the file exists, its ownership and group ownership are correctly set to root.

References

CIS Controls

  • None

Feedback

Is this page helpful?