Skip to content

Container Platform Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The container platform must maintain the confidentiality and integrity of information during reception.

    Information either can be unintentionally or maliciously disclosed or modified during reception for reception within the container platform during aggregation, at protocol transformation points, an...
    Rule Medium Severity
  • SRG-APP-000447

    Group
  • SRG-APP-000450

    Group
  • The container platform must implement organization-defined security safeguards to protect system CPU and memory from resource depletion and unauthorized code execution.

    The execution of images within the container platform runtime must implement organizational defined security safeguards to prevent distributed denial-of-service (DDOS) and other possible attacks ag...
    Rule Medium Severity
  • SRG-APP-000454

    Group
  • SRG-APP-000454

    Group
  • SRG-APP-000456

    Group
  • The container platform registry must contain the latest images with most recent updates and execute within the container platform runtime as authorized by IAVM, CTOs, DTMs, and STIGs.

    Software supporting the container platform, images in the registry must stay up to date with the latest patches, service packs, and hot fixes. Not updating the container platform and container imag...
    Rule Medium Severity
  • SRG-APP-000456

    Group
  • SRG-APP-000472

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules