Skip to content

Container Platform Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000501

    Group
  • SRG-APP-000502

    Group
  • The container platform must generate audit records when successful/unsuccessful attempts to delete categories of information (e.g., classification levels) occur.

    Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...
    Rule Medium Severity
  • SRG-APP-000503

    Group
  • SRG-APP-000504

    Group
  • The container platform must generate audit record for privileged activities.

    The container platform components will generate audit records for privilege activities and container platform runtime, registry, and keystore must generate access audit records to detect possible m...
    Rule Medium Severity
  • SRG-APP-000505

    Group
  • The container platform audit records must record user access start and end times.

    The container platform must generate audit records showing start and end times for users and services acting on behalf of a user accessing the registry and keystore. These components must use the s...
    Rule Medium Severity
  • SRG-APP-000506

    Group
  • SRG-APP-000507

    Group
  • SRG-APP-000508

    Group
  • Direct access to the container platform must generate audit records.

    Direct access to the container platform and its components must generate audit records. All the components must use the same standard so that the events can be tied together to understand what took...
    Rule Medium Severity
  • SRG-APP-000509

    Group
  • The container platform must generate audit records for all account creations, modifications, disabling, and termination events.

    Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...
    Rule Medium Severity
  • SRG-APP-000510

    Group
  • SRG-APP-000514

    Group
  • SRG-APP-000516

    Group
  • Container platform components must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including SRGs, STIGs, NSA configuration guides, CTOs, and DTMs.

    Container platform components are part of the overall container platform, offering services that enable the container platform to fully orchestrate user containers. These components may fall outsid...
    Rule Medium Severity
  • SRG-APP-000516

    Group
  • SRG-APP-000516

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules