Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-233029 | SRG-APP-000038-CTR-000105 | SV-233029r879533_rule | Medium |
Description |
---|
Controlling information flow between the container platform components and container user services instantiated by the container platform must enforce organization-defined information flow policies. Example methods for information flow control are using labels and separate namespace for containers to segregate services; user permissions and roles to limit what user services are available to each user; controlling the user the services are able to execute as; and limiting inter-container network traffic and the resources containers can consume. |
STIG | Date |
---|---|
Container Platform Security Requirements Guide | 2023-06-05 |
Check Text ( C-35965r601604_chk ) |
---|
Review the container platform to determine if approved authorizations for controlling the flow of information within the container platform based on organization-defined information flow control policies is being enforced. If the organization-defined information flow policies are not being enforced, this is a finding. |
Fix Text (F-35933r600575_fix) |
---|
Configure the container platform to enforce approved authorizations for controlling the flow of information within the container platform based on organization-defined information flow control policies. |