Skip to content

0310-docker-runlike-Get Docker Runtime Run Parameters

Rule ID

  • 0310-docker-runlike

Category

  • Container

Level

  • warn

Compatible Versions

  • Linux

Description

  • The Docker daemon uses Docker environment files to set the runtime environment of the Docker daemon. If Docker is used on a machine managed by systemd, the file is /etc/sysconfig/docker. On other systems, the environment file is /etc/default/docker. Verify that the environment file permissions are correctly set to 644 or more restrictive.

Scan Frequency

  • 0 */30 * * *

Rationale

  • The Docker environment file contains sensitive parameters that may alter the behavior of the Docker daemon at runtime. Therefore, it should only be writable by root to maintain the integrity of the file.

Risk Item

  • Container Security

Audit Method

  • Execute the following command to verify that the environment file permissions are set to 644 or more restrictive:
stat -c %a /etc/sysconfig/docker

Remediation

  • Execute the following command:
#> chmod 644 /etc/sysconfig/docker

This sets the file permissions of the environment file to 644.

Impact

  • None

Default Value

  • By default, the file permissions of this file are correctly set to 644.

References

CIS Controls

  • None

Feedback

Is this page helpful?