Ensure auditing is configured for Docker files and directories – docker.socket (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit the Docker daemon. Because...
Blog
Ensure auditing is configured for Docker files and directories – /var/lib/docker (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit all Docker related files...
Kubernetes node’s kubelet read-only-port is enabled
The kubelet reads various parameters, including security settings, from a config file. The Kubelet process provides a read-only API in...
Kubernetes node’s kubelet streaming-connection-idle-timeout is set 0
The kubelet reads various parameters, including security settings, from a config file. Setting idle timeouts ensures that you are protected...
Kubernetes node’s kubelet protect-kernel-defaults is set false
The kubelet reads various parameters, including security settings, from a config file. Kernel parameters are usually tuned and hardened by...
Ensure auditing is configured for Docker files and directories – /etc/docker/daemon.json (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit all Docker related files...
VMware Virtual Machine with host information feature enabled
A VMware virtual machine is a software-based emulation of a physical computer. By enabling a VM to get detailed information...
Kubernetes node’s kubelet make-iptables-util-chains is set false
The kubelet reads various parameters, including security settings, from a config file. Kubelets can automatically manage the required changes to...
Kubernetes node’s kubelet eventRecordQPS is greater than 5
The kubelet reads various parameters, including security settings, from a config file. The --eventRecordQPS flag on the Kubelet can be...