GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-18 16:22:33 +01:00
Code Issues Projects Releases Packages Wiki Activity
898 commits 3 branches 11 tags 4.9 MiB
Commit graph

898 commits

This branch
This branch
All branches
Author SHA1 Message Date
Thomas Sjögren
5e1c2b7ec1 Merge pull request #108 from thaJeztah/add-maintainers 
Add MAINTAINERS file
 2015-12-07 18:50:45 +01:00
Sebastiaan van Stijn
fd82ff8186 Add MAINTAINERS file 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2015-12-07 18:49:11 +01:00
Andreas Stieger
e285c472d6 Support remote users and groups for group check. Fixes #104 
Grepping /etc/group discards users and grous coming from NIS, LDAP, AD.
Use getent group which covers all.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:17:48 +01:00
Andreas Stieger
3f538f537f Vendors now support docker packages, add language for #103 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:09:15 +01:00
Andreas Stieger
2c6285d4ef Improve statement of version check 1.6, fixes #103 
Add an as-of date.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 15:43:13 +01:00
Thomas Sjögren
93439abcd3 Merge pull request #102 from konstruktoid/systemd_service 
Systemd service
 2015-11-27 19:53:47 +01:00
Thomas Sjögren
80794e5638 get .service file location from systemd 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:26:03 +01:00
Thomas Sjögren
e5f15e216d get the systemd service file 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:25:14 +01:00
Thomas Sjögren
eda8e3a963 Merge pull request #100 from andreasstieger/cli 
Fix command line option parsing issues 
Closes #97 #98 #99
 2015-11-27 18:45:23 +01:00
Andreas Stieger
d2ba1d9f72 Fix #97, #98, #99 by using new helper functions 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-27 15:35:37 +01:00
Thomas Sjögren
5939f09acb Merge pull request #101 from konstruktoid/bump_version 
latest version is 1.9.1
 2015-11-21 20:51:38 +01:00
Thomas Sjögren
2e6d3b290a latest version is 1.9.1 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-21 20:51:05 +01:00
Andreas Stieger
49f78d715a In preparation to fixing #99, normalize different methods of quoting to no quoting 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:37 +01:00
Andreas Stieger
ef81ec7a47 Add helper functions in preparation of fixing #97, #98, #99 
get_docker_cumulative_command_line_args: new
get_docker_effective_command_line_args: new

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:33 +01:00
Andreas Stieger
3b6a0d1a6e Documentation fix for get_command_line_args 
pgrep is run with -o, returning only the oldest process, usually the daemon.
Adjust function comment. TODO: read from PID file

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 14:56:34 +01:00
Thomas Sjögren
f2f1195550 Merge pull request #91 from MrSecure/29-tcp-required 
check for TCP socket before checking for TLS
 2015-11-14 20:54:41 +01:00
Mr. Secure
f791d06cff apply TLS checks to any socket other than unix:// or fd:// 
break the docker command line arguments into one option per line,
then find all socket items (H or host), exclude the unix:// and
fd:// sockets, and if there are any left, check for TLS options

Signed-off-by: Mr. Secure <ben.github@mrsecure.org>
 2015-11-13 19:51:46 -06:00
Thomas Sjögren
e84f47b6b6 Merge pull request #96 from andreasstieger/sockets 
correct UNIX domain socket handling - fixes #94 and #95
 2015-11-11 20:47:49 +01:00
Andreas Stieger
cd7efa2afc Fix test 3.25, correctly check for root:docker ownership, fixes #95 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-11 18:58:03 +01:00
Andreas Stieger
c5cb9cdc5c POSIX test command requires -S for UNIX domain sockets, fixes #94 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-11 18:57:58 +01:00
Thomas Sjögren
adf88311e0 Merge pull request #93 from konstruktoid/version 
1.9.0 released
 2015-11-04 18:24:54 +01:00
Thomas Sjögren
9b9f17cabc 1.9.0 released 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-04 18:23:25 +01:00
Thomas Sjögren
32fdfe2ca6 Merge pull request #92 from andreasstieger/dockerfile-opensuse 
add Dockerfile for openSUSE
 2015-11-04 18:20:50 +01:00
Andreas Stieger
70e3e07c9b add Dockerfile for openSUSE 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-03 13:30:59 +01:00
MrSecure
81730f536a check for TCP listener 
Signed-off-by: Mr. Secure <ben.github@mrsecure.org>
 2015-10-30 07:48:11 -05:00
Thomas Sjögren
8eb4cf7e13 Merge pull request #88 from HuKeping/master 
Docs: update readme
 2015-10-22 19:17:48 +02:00
HuKeping
322124c1dc Docs: update readme 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2015-10-22 17:11:10 +08:00
Diogo Mónica
04f93b1f72 Merge pull request #86 from lusitania/have-compose 
Use compose to improve readability
 2015-10-06 08:29:12 -07:00
lusitania
10f0689b02 use compose to improve readability 
Signed-off-by: Peter <lusitania@users.noreply.github.com>
 2015-10-06 07:30:21 +02:00
Thomas Sjögren
62bc609528 Merge pull request #87 from konstruktoid/bump_version 
current version is 1.8.2
 2015-10-01 21:50:13 +02:00
Thomas Sjögren
50dc806232 current version is 1.8.2 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-10-01 21:46:33 +02:00
Thomas Sjögren
297368ec0f Merge pull request #84 from lusitania/#83-reorder-centos-steps 
#83 First instruction must be FROM
 2015-09-16 18:34:10 +02:00
Peter
a9bb0123b2 #83 First instruction must be FROM 
See https://docs.docker.com/reference/builder/

Signed-off-by: lusitania <lusitania@users.noreply.github.com>
 2015-09-14 13:14:02 +02:00
Thomas Sjögren
dafd938d19 Merge pull request #81 from konstruktoid/tee_file_missing 
missing file as non-root user
 2015-09-05 16:26:55 +02:00
Thomas Sjögren
32282729dc missing file as non-root user 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-09-05 16:23:34 +02:00
Thomas Sjögren
91304ad47a Merge pull request #80 from konstruktoid/nonroot_delay 
dont sleep before showing flags
 2015-09-05 15:52:27 +02:00
Thomas Sjögren
a0f66dba13 dont sleep before showing flags 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-09-05 15:51:51 +02:00
Thomas Sjögren
1655718e12 Merge pull request #79 from konstruktoid/logoutput 
write init date to output file as well
 2015-09-05 15:46:22 +02:00
Thomas Sjögren
151bb6d16f write init date to output file as well 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-09-05 15:44:44 +02:00
Thomas Sjögren
a010128ed2 Merge pull request #78 from jumanjiman/usage 
improve CLI option handling
 2015-09-05 15:33:56 +02:00
Paul Morgan
085b260a7b exit with proper status on CLI options 
* if `-h` is used: exit good
* if a non-valid CLI option is used without `-h`: exit bad

Signed-off-by: Paul Morgan <jumanjiman@gmail.com>
 2015-09-04 21:13:05 -04:00
Paul Morgan
aaffcb8df1 show logging option when user asks for help 
* avoid printf to simplify usage() syntax
* add reminder to update usage() when CLI option is added
* preserve indentation for help output

Signed-off-by: Paul Morgan <jumanjiman@gmail.com>
 2015-09-04 21:13:05 -04:00
Paul Morgan
ed6b0fa348 remove unused CLI options 
* -f is not used in `getopts`
* -i is not used in `getopts`
* -l needs trailing `:` to mandate `path/to/log/file`
* leading `:` is unnecessary in standard shell

Signed-off-by: Paul Morgan <jumanjiman@gmail.com>
 2015-09-04 19:24:25 -04:00
Thomas Sjögren
a1d9a18400 Merge pull request #77 from csabapalfi/refactor_process_count_check 
Make process count check a bit easier to read
 2015-08-17 19:43:06 +02:00
Csaba Palfi
831a373a61 make process count check even simpler 
Signed-off-by: Csaba Palfi <csaba@palfi.me>
 2015-08-17 17:41:47 +01:00
Csaba Palfi
d7926a0f31 make process count check a bit easier to read 
Signed-off-by: Csaba Palfi <csaba@palfi.me>
 2015-08-17 17:29:42 +01:00
Thomas Sjögren
1566929f87 Merge pull request #75 from konstruktoid/jessie 
switch to jessie
 2015-08-13 22:39:03 +02:00
Thomas Sjögren
f4e5cfd7df Merge pull request #76 from konstruktoid/prettier_output 
prettier Docker exec fail output
 2015-08-13 22:38:51 +02:00
Thomas Sjögren
930f7ea676 switch to jessie 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-08-13 22:35:50 +02:00
Thomas Sjögren
75a7f955cc prettier Docker exec fail output 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-08-13 22:06:03 +02:00