Container Platform Security Requirements Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000501
Group -
SRG-APP-000502
Group -
The container platform must generate audit records when successful/unsuccessful attempts to delete categories of information (e.g., classification levels) occur.
Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...Rule Medium Severity -
SRG-APP-000503
Group -
SRG-APP-000504
Group -
The container platform must generate audit record for privileged activities.
The container platform components will generate audit records for privilege activities and container platform runtime, registry, and keystore must generate access audit records to detect possible m...Rule Medium Severity -
SRG-APP-000505
Group -
The container platform audit records must record user access start and end times.
The container platform must generate audit records showing start and end times for users and services acting on behalf of a user accessing the registry and keystore. These components must use the s...Rule Medium Severity -
SRG-APP-000506
Group -
SRG-APP-000507
Group -
SRG-APP-000508
Group -
Direct access to the container platform must generate audit records.
Direct access to the container platform and its components must generate audit records. All the components must use the same standard so that the events can be tied together to understand what took...Rule Medium Severity -
SRG-APP-000509
Group -
The container platform must generate audit records for all account creations, modifications, disabling, and termination events.
Without generating audit records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an in...Rule Medium Severity -
SRG-APP-000510
Group -
SRG-APP-000514
Group -
SRG-APP-000516
Group -
Container platform components must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including SRGs, STIGs, NSA configuration guides, CTOs, and DTMs.
Container platform components are part of the overall container platform, offering services that enable the container platform to fully orchestrate user containers. These components may fall outsid...Rule Medium Severity -
SRG-APP-000516
Group -
SRG-APP-000516
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.