aquasecurity / docker-bench

Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

some checks have wrong description in docker 1.13 profile

liranaqua opened this issue · comments

Description of the following checks should be changed to-

2.2 Set the logging level (Scored)
2.3 Allow Docker to make changes to iptables (Scored)
2.4 Do not use insecure registries (Scored)
2.5 Do not use the aufs storage driver (Scored)
2.6 Configure TLS authentication for Docker daemon (Scored)
2.7 Set default ulimit as appropriate (Not Scored)
2.9 Confirm default cgroup usage (Scored)
2.10 Do not change base device size until needed (Scored)
2.11 Use authorization plugin (Scored)
2.12 Configure centralized and remote logging (Scored)
2.13 Disable operations on legacy registry (v1) (Scored)
2.14 Enable live restore (Scored)
2.18 Disable Userland Proxy (Scored)
2.20 Apply a daemon-wide custom seccomp profile, if needed (Not Scored)
2.21 Avoid experimental features in production (Scored)