Workload misconfigurations

Ensure that registry certificate file permissions are set to 444 or more restrictively (Automated)

Platform(s)
Compliance Frameworks

Description

You should verify that all the registry certificate files (usually found under /etc/docker/certs.d/<registry-name> directory) have permissions of 444 or are set more restrictively.