mirror of
https://github.com/docker/docker-bench-security.git
synced 2025-01-31 14:22:33 +01:00
add checking to avoid using overlayfs (due to no quota support, similar to aufs driver issue, which is protential for containers to run out of disk space easily with a simple command: dd if=/dev/zero of=hack ).
Signed-off-by: cuiwei13 <cuiwei13@pku.edu.cn>
This commit is contained in:
parent
7976432be3
commit
969d660c40
1 changed files with 2 additions and 2 deletions
|
@ -40,8 +40,8 @@ else
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# 2.5
|
# 2.5
|
||||||
check_2_5="2.5 - Do not use the aufs storage driver"
|
check_2_5="2.5 - Do not use the aufs/overlayfs storage driver"
|
||||||
docker info 2>/dev/null | grep -e "^Storage Driver:\s*aufs\s*$" >/dev/null 2>&1
|
docker info 2>/dev/null | grep -e "^Storage Driver:\s*aufs\s*$" -e "^Storage Driver:\s*overlay\s*$" >/dev/null 2>&1
|
||||||
if [ $? -eq 0 ]; then
|
if [ $? -eq 0 ]; then
|
||||||
warn "$check_2_5"
|
warn "$check_2_5"
|
||||||
else
|
else
|
||||||
|
|
Loading…
Reference in a new issue