Docker Enterprise /etc/docker directory permissions must be set to 755 or more restrictive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-235856	DKER-EE-005220	SV-235856r627695_rule		Medium

Description
Verify that the /etc/docker directory permissions are correctly set to 755 or more restrictive. /etc/docker directory contains certificates and keys in addition to various sensitive files. Hence, it should only be writable by root to maintain the integrity of the directory. By default, the permissions for this directory are correctly set to 755.

STIG	Date
Docker Enterprise 2.x Linux/UNIX Security Technical Implementation Guide	2021-03-26

Details

Check Text ( C-39075r627693_chk )
Execute the below command to verify that the directory has permissions of 755 or more restrictive: stat -c %a /etc/docker If the permissions are not set to 755, this is a finding.

Fix Text (F-39038r627694_fix)
set the permissions for the directory to 755. Execute the following command: chmod 755 /etc/docker