Ensure the default seccomp profile is not Disabled (Automated)
Seccomp filtering provides a means for a process to specify a filter for incoming system calls. The default Docker seccomp...
Blog
Ensure that the Containerd socket file ownership is set to root:root (Automated)
You should verify that the Containerd socket file is owned by root and group owned by root.
Ensure auditing is configured for Docker files and directories – /usr/bin/containerd-shim-runc-v2 (Automated)
Audit /usr/bin/containerd-shim-runc-v2 if applicable.
Ensure that, if applicable, SELinux security options are set (Automated)
SELinux is an effective and easy-to-use Linux application security system. It is available by default on some distributions such as...
Ensure that, if applicable, an AppArmor Profile is enabled (Automated)
AppArmor is an effective and easy-to-use Linux application security system. It is available on some Linux distributions by default, for...
Ensure that the Containerd socket file permissions are set to 660 or more restrictively (Automated)
You should verify that the Containerd socket file has permissions of 660 or are configured more restrictively.
Ensure sshd is not run within containers (Automated)
The SSH daemon should not be running within the container. You should SSH into the Docker host, and use docker...
Apache Spark configuration without authentication
We have detected an Apache Spark configuration file on the system which doesn't support authentication. This could allow unwanted users...
Ensure TLS is enabled and configured correctly (Automated)
If TLS is not enabled and configured correctly, this increases the risk of data being compromised in transit.