Control: 3.5 Ensure that the /etc/docker directory ownership is set to root:root
Description
You should verify that the /etc/docker
directory ownership and group ownership is
correctly set to root
.
The /etc/docker
directory contains certificates and keys in addition to various other
sensitive files. It should therefore be individual owned and group owned by root
in order
to ensure that it can not be modified by less privileged users.
Remediation
To resolve this issue you should run the following command:
chown root:root /etc/docker
This sets the ownership and group ownership for the directory to root.
Default Value
By default, the ownership and group ownership for this directory is correctly set to root
.
Usage
Run the control in your terminal:
powerpipe control run docker_compliance.control.cis_v160_3_5
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run docker_compliance.control.cis_v160_3_5 --share
SQL
This control uses a named query:
exec_ownership_root_root_etc_docker