Skip to content

Container Platform Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000374

    <GroupDescription></GroupDescription>
    Group
  • All audit records must use UTC or GMT time stamps.

    &lt;VulnDiscussion&gt;The container platform and its components must generate audit records using either Coordinated Universal Time (UTC) or Greenw...
    Rule Medium Severity
  • SRG-APP-000375

    <GroupDescription></GroupDescription>
    Group
  • The container platform must implement NSA-approved cryptography to protect classified information in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

    &lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data and images. The...
    Rule Medium Severity
  • The container platform runtime must prohibit the instantiation of container images without explicit privileged status.

    &lt;VulnDiscussion&gt;Controlling access to those users and roles responsible for container image instantiation reduces the risk of untested or pot...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules