STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

Authentication files for the container platform must be protected.

DISA Rule

SV-233070r599509_rule

Vulnerability Number

V-233070

Group Title

SRG-APP-000133

Rule Version

SRG-APP-000133-CTR-000310

Severity

CAT II

CCI(s)

• CCI-001499 - The organization limits privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure the container platform to only allow authentication file modifications by privileged users.

Check Contents

Review the container platform to verify that authentication files cannot be modified by non-privileged users.

If non-privileged users can modify key and certificate files, this is a finding.

Vulnerability Number

V-233070

Documentable

False

Rule Version

SRG-APP-000133-CTR-000310

Severity Override Guidance

Review the container platform to verify that authentication files cannot be modified by non-privileged users.

If non-privileged users can modify key and certificate files, this is a finding.

Check Content Reference

M

Target Key

5239

Comments