cis-docker-7.5
Ensure that swarm manager is run in auto-lock mode
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that swarm manager is run in auto-lock mode
Ensure that CA certificates are rotated as appropriate
Ensure that management plane traffic is separated from data plane traffic
Ensure a separate partition for containers has been created
Ensure auditing is configured for Docker files and directories - /etc/containerd/config.toml
Ensure auditing is configured for Docker files and directories - /usr/bin/containerd
Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v1
Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v2
Ensure auditing is configured for Docker files and directories - /usr/bin/runc
Ensure only trusted users are allowed to control Docker daemon