Control: 2.1 Run the Docker daemon as a non-root user, if possible
Description
Rootless mode executes the Docker daemon and containers inside a user namespace, with both the daemon and the container are running without root privileges. Rootless mode allows running the Docker daemon and containers as a non-root user to mitigate potential vulnerabilities in the daemon and the container runtime
Remediation
Follow the current Docker documentation on how to install the Docker daemon as a non-root user
Default Value
The Docker daemon is running as the root user by default.
Usage
Run the control in your terminal:
powerpipe control run docker_compliance.control.cis_v160_2_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run docker_compliance.control.cis_v160_2_1 --shareSQL
This control uses a named query:
exec_docker_daemon_run_as_root_user