GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-06-22 14:49:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

New Features

Browse source 
Signed-off-by: Mike Ritter <mike.ritter@target.com>
This commit is contained in:
Mike Ritter 2018-02-27 08:43:51 -06:00
parent 44b82d53e2
commit a3094ac5c6
3 changed files with 47 additions and 24 deletions

33
tests/5_container_runtime.sh
View file

@ -988,19 +988,27 @@ check_5_29() {
for net in $networks; do
if docker network inspect --format '{{ .Options }}' "$net" 2>/dev/null | grep "com.docker.network.bridge.name:docker0" >/dev/null 2>&1; then
docker0Containers=$(docker network inspect --format='{{ range $k, $v := .Containers }} {{ $k }} {{ end }}' "$net" | \
sed -e 's/^ //' -e 's/ /\n/g' 2>/dev/null)
if [ -n "$docker0Containers" ]; then
if [ $fail -eq 0 ]; then
info "$check_5_29"
logjson "5.29" "INFO"
fail=1
sed -e 's/^ //' -e 's/ /\n/g' 2>/dev/null)
if [ -n "$docker0Containers" ]; then
if [ $fail -eq 0 ]; then
info "$check_5_29"
logjson "5.29" "INFO"
fail=1
fi
for c in $docker0Containers; do
if [ -z "$exclude" ]; then
cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g')
else
pattern=$(echo "$exclude" | sed 's/,/|/g')
cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g' | grep -Ev "$pattern" )
fi
if ! [ -z "$cName" ]; then
info " * Container in docker0 network: $cName"
logjson "5.29" "INFO: $c"
fi
done
fi
for c in $docker0Containers; do
cName=$(docker inspect --format '{{.Name}}' "$c" 2>/dev/null | sed 's/\///g')
info " * Container in docker0 network: $cName"
logjson "5.29" "INFO: $c"
done
fi
currentScore=$((currentScore + 0))
fi
done
@ -1081,4 +1089,3 @@ check_5_31() {
currentScore=$((currentScore - 1))
fi
}