search

docker / docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Apache License 2.0
9.18k stars 1.02k forks source link

fix: check_2_8 not working as intended #561

Open tbfpartner opened 1 week ago

tbfpartner commented 1 week ago

fixing check 2.8

tbfpartner commented 1 week ago

running command on host

cat /etc/docker/daemon.json

{
  "some-redacted-stuff": "some-redacted-stuff",
  "default-ulimits": {
    "nproc": {
      "Name": "nproc",
      "Hard": 1024,
      "Soft": 1024
    },
    "nofile": {
      "Name": "nofile",
      "Hard": 20480,
      "Soft": 20480
    }
  },
  "some-redacted-stuff": "some-redacted-stuff"
}

snippet of script output 2024-11-19T22:52:06.922110280Z [PASS] 2.8 - Ensure the default ulimit is configured appropriately (Manual)