Elasticsearch without at least three dedicated master nodes
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
All articles by Orca Security
Ensure the default seccomp profile is not Disabled (Automated)
Seccomp filtering provides a means for a process to specify a filter for incoming system calls. The default Docker seccomp...
Ensure that the Containerd socket file ownership is set to root:root (Automated)
You should verify that the Containerd socket file is owned by root and group owned by root.
Ensure auditing is configured for Docker files and directories – /usr/bin/containerd-shim-runc-v2 (Automated)
Audit /usr/bin/containerd-shim-runc-v2 if applicable.
Ensure that, if applicable, SELinux security options are set (Automated)
SELinux is an effective and easy-to-use Linux application security system. It is available by default on some distributions such as...
Ensure that, if applicable, an AppArmor Profile is enabled (Automated)
AppArmor is an effective and easy-to-use Linux application security system. It is available on some Linux distributions by default, for...
Ensure that the Containerd socket file permissions are set to 660 or more restrictively (Automated)
You should verify that the Containerd socket file has permissions of 660 or are configured more restrictively.
Ensure sshd is not run within containers (Automated)
The SSH daemon should not be running within the container. You should SSH into the Docker host, and use docker...
Apache Spark configuration without authentication
We have detected an Apache Spark configuration file on the system which doesn't support authentication. This could allow unwanted users...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.