Docker Enterprise registry certificate file ownership must be set to root:root.
An XCCDF Rule
Description
Verify that all the registry certificate files (usually found under /etc/docker/certs.d/<registry-name> directory) are owned and group-owned by root. /etc/docker/certs.d/<registry-name> directory contains Docker registry certificates. These certificate files must be owned and group-owned by root to maintain the integrity of the certificates. By default, the ownership and group-ownership for registry certificate files is correctly set to root.
- ID
- SV-235857r627698_rule
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Set the ownership and group-ownership for the registry certificate files to root.
Run the following command:
chown root:root /etc/docker/certs.d/<registry-name>/*