Skip to content
Log In

SRG-APP-000233-CTR-000585

The container platform runtime must isolate security functions from non-security functions.

Canonical Source

SV-233125r961131_rule ( from Container Platform Security Requirements Guide )

Description

The container platform runtime must be configured to isolate those services used for security functions from those used for non-security functions. This separation can be performed using environment variables, labels, network segregation, and kernel groups.