Skip to content

Commit e29b4f1

Browse files
committed
update control 1.15
Signed-off-by: Patrick Münch <patrick.muench1111@gmail.com>
1 parent 273c37c commit e29b4f1

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

controls/docker_host_os_level1.rb

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -251,10 +251,11 @@
251251
impact 1.0
252252
title 'Audit Docker files and directories - /usr/bin/docker-runc'
253253
desc 'Apart from auditing your regular Linux file system and system calls, audit all Docker related files and directories. Docker daemon runs with \'root\' privileges. Its behavior depends on some key files and directories. /usr/bin/docker-runc is one such file. Docker now relies on containerd and runC to spawn containers. It must be audited, if applicable.'
254-
ref 'https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html'
255-
ref 'https://github.com/docker/docker/pull/20662'
256-
ref 'https://containerd.tools/'
257-
ref 'https://github.com/opencontainers/runc'
254+
tag 'host'
255+
ref 'System auditing', url:'https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-system_auditing.html'
256+
ref 'Containerd integration', url: 'https://github.com/docker/docker/pull/20662'
257+
ref 'Containerd tools', url: 'https://containerd.tools/'
258+
ref 'Opencontainers runc repository', url: 'https://github.com/opencontainers/runc'
258259

259260
describe auditd_rules do
260261
its(:lines) { should include('-w /usr/bin/docker-runc -p rwxa -k docker') }

0 commit comments

Comments
 (0)