Docker Enterprise /etc/default/docker file ownership must be set to root:root.
An XCCDF Rule
Description
<VulnDiscussion>Verify that the /etc/default/docker file ownership and group-ownership is correctly set to root. /etc/default/docker file contains sensitive parameters that may alter the behavior of docker daemon. Hence, it should be owned and group-owned by root to maintain the integrity of the file. This file may not be present on the system. In that case, this recommendation is not applicable.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-235869r627734_rule
- Severity
- High
- References
- Updated
Remediation - Manual Procedure
Set the ownership and group-ownership for the file to root.
Run the following command:
chown root:root /etc/default/docker