CyberStrikeus/CyberStrike - 第 158 页

cis-k8s-v200-5-4-2

Consider external secret storage (Manual)

原文语言：英语

cis-k8s-v200-5-5-1

Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)

原文语言：英语

cis-k8s-v200-5-6-1

Create administrative boundaries between resources using namespaces (Manual)

原文语言：英语

cis-k8s-v200-5-6-2

Ensure that the seccomp profile is set to docker/default in your pod definitions (Manual)

原文语言：英语

cis-k8s-v200-5-6-3

Apply Security Context to Your Pods and Containers (Manual)

原文语言：英语

cis-k8s-v200-5-6-4

The default namespace should not be used (Manual)

原文语言：英语

cis-apache24-6-3

Ensure the Server Access Log Is Configured Correctly

原文语言：英语

cis-docker-1-1-1

Ensure a separate partition for containers has been created

原文语言：英语

cis-docker-1-1-10

Ensure auditing is configured for Docker files and directories - /etc/default/docker

原文语言：英语

cis-docker-1-1-11

Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json

原文语言：英语

cis-docker-1-1-12

Ensure auditing is configured for Docker files and directories - /etc/containerd/config.toml

原文语言：英语

cis-docker-1-1-13

Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker

原文语言：英语

cis-docker-1-1-14

Ensure auditing is configured for Docker files and directories - /usr/bin/containerd

原文语言：英语

cis-docker-1-1-15

Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim

原文语言：英语

cis-docker-1-1-16

Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v1

原文语言：英语

cis-docker-1-1-17

Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v2

原文语言：英语

cis-docker-1-1-18

Ensure auditing is configured for Docker files and directories - /usr/bin/runc

原文语言：英语

cis-docker-1-1-2

Ensure only trusted users are allowed to control Docker daemon

原文语言：英语

cis-docker-1-1-3

Ensure auditing is configured for the Docker daemon

原文语言：英语

cis-docker-1-1-4

Ensure auditing is configured for Docker files and directories - /run/containerd

原文语言：英语

cis-docker-1-1-5

Ensure auditing is configured for Docker files and directories - /var/lib/docker

原文语言：英语

cis-docker-1-1-6

Ensure auditing is configured for Docker files and directories - /etc/docker

原文语言：英语

cis-docker-1-1-7

Ensure auditing is configured for Docker files and directories - docker.service

原文语言：英语

cis-docker-1-1-8

Ensure auditing is configured for Docker files and directories - containerd.sock

原文语言：英语

cis-docker-1-1-9

Ensure auditing is configured for Docker files and directories - docker.sock

原文语言：英语

cis-docker-1-2-1

Ensure the container host has been Hardened

原文语言：英语

cis-docker-1-2-2

Ensure that the version of Docker is up to date

原文语言：英语

cis-docker-2-1

Run the Docker daemon as a non-root user, if possible

原文语言：英语

cis-docker-2-10

Enable user namespace support

原文语言：英语

cis-docker-2-11

Ensure the default cgroup usage has been confirmed

原文语言：英语

cis-docker-2-12

Ensure base device size is not changed until needed

原文语言：英语

cis-docker-2-13

Ensure that authorization for Docker client commands is enabled

原文语言：英语

cis-docker-2-14

Ensure centralized and remote logging is configured

原文语言：英语

cis-docker-2-15

Ensure containers are restricted from acquiring new privileges

原文语言：英语

cis-docker-2-16

Ensure live restore is enabled

原文语言：英语

cis-docker-2-17

Ensure Userland Proxy is Disabled

原文语言：英语

cis-docker-2-18

Ensure that a daemon-wide custom seccomp profile is applied if appropriate

原文语言：英语

cis-docker-2-19

Ensure that experimental features are not implemented in production

原文语言：英语

cis-docker-2-2

Ensure network traffic is restricted between containers on the default bridge

原文语言：英语

cis-docker-2-3

Ensure the logging level is set to 'info'

原文语言：英语