STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

Configuration files for the container platform must be protected.

DISA Rule

SV-233069r599509_rule

Vulnerability Number

V-233069

Group Title

SRG-APP-000133

Rule Version

SRG-APP-000133-CTR-000305

Severity

CAT II

CCI(s)

• CCI-001499 - The organization limits privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure the container platform to only allow configuration modifications by privileged users.

Check Contents

Review the container platform to verify that configuration files cannot be modified by non-privileged users.

If non-privileged users can modify configuration files, this is a finding.

Vulnerability Number

V-233069

Documentable

False

Rule Version

SRG-APP-000133-CTR-000305

Severity Override Guidance

Review the container platform to verify that configuration files cannot be modified by non-privileged users.

If non-privileged users can modify configuration files, this is a finding.

Check Content Reference

M

Target Key

5239

Comments