Closed wojiushixiaobai closed 8 months ago
qiangxuhui
commented
8 months ago | code | level | alerts | |
|---|---|---|---|
| 0 | CIS-DI-0001 | WARN | Last user should not be root |
| 1 | CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
| 2 | CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
| 3 | CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/newgrp |
qiangxuhui
commented
8 months ago | code | level | alerts | |
|---|---|---|---|
| 0 | CIS-DI-0001 | WARN | Last user should not be root |
| 1 | CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
| 2 | CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
| 3 | CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
qiangxuhui
commented
8 months ago | code | level | alerts | |
|---|---|---|---|
| 0 | CIS-DI-0010 | FATAL | Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key) |
| 1 | CIS-DI-0001 | WARN | Last user should not be root |
| 2 | CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
| 3 | CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
| 4 | CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |