Skip to content
ATO Pathways
  Log In

Container Platform Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000133

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform must limit privileges to the container platform registry.

    &lt;VulnDiscussion&gt;To control what is instantiated within the container platform, it is important to control access to the registry. Without thi...
    Rule Medium Severity
    Show

  • SRG-APP-000133

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform must limit privileges to the container platform runtime.

    &lt;VulnDiscussion&gt;To control what is instantiated within the container platform, it is important to control access to the runtime. Without this...
    Rule Medium Severity
    Show

  • SRG-APP-000133

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform must limit privileges to the container platform keystore.

    &lt;VulnDiscussion&gt;The container platform keystore is used to store credentials used to build a trust between the container platform and some ex...
    Rule Medium Severity
    Show

  • SRG-APP-000133

    <GroupDescription></GroupDescription>
    Group
    Show

  • Configuration files for the container platform must be protected.

    &lt;VulnDiscussion&gt;The secure configuration of the container platform must be protected by disallowing changes to be implemented by non-privileg...
    Rule Medium Severity
    Show

  • SRG-APP-000133

    <GroupDescription></GroupDescription>
    Group
    Show

  • Authentication files for the container platform must be protected.

    &lt;VulnDiscussion&gt;The secure configuration of the container platform must be protected by disallowing changing to be implemented by non-privile...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform must be configured with only essential configurations.

    &lt;VulnDiscussion&gt;The container platform can be built with components that are not used for the intended purpose of the organization. To limit ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform registry must contain only container images for those capabilities being offered by the container platform.

    &lt;VulnDiscussion&gt;Allowing container images to reside within the container platform registry that are not essential to the capabilities being o...
    Rule Medium Severity
    Show

  • SRG-APP-000142

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform runtime must enforce ports, protocols, and services that adhere to the PPSM CAL.

    &lt;VulnDiscussion&gt;Ports, protocols, and services within the container platform runtime must be controlled and conform to the PPSM CAL. Those po...
    Rule Medium Severity
    Show

  • SRG-APP-000142

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform runtime must enforce the use of ports that are non-privileged.

    &lt;VulnDiscussion&gt;Privileged ports are those ports below 1024 and that require system privileges for their use. If containers are able to use t...
    Rule Medium Severity
    Show

  • SRG-APP-000148

    <GroupDescription></GroupDescription>
    Group
    Show

  • The container platform must uniquely identify and authenticate users.

    &lt;VulnDiscussion&gt;The container platform requires user accounts to perform container platform tasks. These tasks may pertain to the overall con...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules