Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The container platform must limit privileges to the container platform runtime.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-233067 | SRG-APP-000133-CTR-000295 | SV-233067r960960_rule | Medium |
| Description |
|---|
| To control what is instantiated within the container platform, it is important to control access to the runtime. Without this control, container platform specific services and customer services can be introduced without receiving approval and going through proper testing. Only those individuals and roles approved by the organization can have access to the container platform runtime. |
| STIG | Date |
|---|---|
| Container Platform Security Requirements Guide | 2024-05-28 |
Details
| Check Text ( C-36003r601700_chk ) |
|---|
| Review the container platform runtime configuration to determine if the level of access to the runtime is controlled through user privileges. Attempt to perform runtime operations to determine if the privileges are enforced. If the container platform runtime is not limited through user privileges or the user privileges are not enforced, this is a finding. |
| Fix Text (F-35971r600689_fix) |
|---|
| Configure the container platform to use and enforce user privileges when accessing the container platform runtime. |