Skip to content

Container Platform Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000375

    Group
  • SRG-APP-000378

    Group
  • The container platform must prohibit the installation of patches and updates without explicit privileged status.

    Controlling access to those users and roles responsible for patching and updating the container platform reduces the risk of untested or potentially malicious software from being installed within t...
    Rule Medium Severity
  • SRG-APP-000378

    Group
  • The container platform runtime must prohibit the instantiation of container images without explicit privileged status.

    Controlling access to those users and roles responsible for container image instantiation reduces the risk of untested or potentially malicious containers from being executed within the platform an...
    Rule High Severity
  • SRG-APP-000378

    Group
  • SRG-APP-000380

    Group
  • The container platform must enforce access restrictions for container platform configuration changes.

    Configuration changes cause the container platform to change the way it operates. These changes can be used to improve the system with added features or performance, but these configuration changes...
    Rule Medium Severity
  • SRG-APP-000381

    Group
  • The container platform must enforce access restrictions and support auditing of the enforcement actions.

    Auditing the enforcement of access restrictions against changes to the container platform helps identify attacks and provides forensic data for investigation for after-the-fact actions. Attempts to...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules