GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-19 00:32:34 +01:00
Code Issues Projects Releases Packages Wiki Activity
832 commits 3 branches 11 tags 4.9 MiB
Commit graph

832 commits

This branch
This branch
All branches
Author SHA1 Message Date
Thomas Sjögren
9911abbc2d Merge pull request #133 from konstruktoid/cis_1.11_2 
update chap 2 to cis 1.11
 2016-04-14 22:26:33 +02:00
Thomas Sjögren
3cafe284dd update chap 2 to cis 1.11 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-04-14 22:25:11 +02:00
Thomas Sjögren
e2a480b35b Merge pull request #132 from konstruktoid/cis_1.11_1 
update chap 1 to cis 1.11
 2016-04-14 21:31:58 +02:00
Thomas Sjögren
1454b300a0 add 1.4 again 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-04-14 21:27:24 +02:00
Thomas Sjögren
6be21785c4 update chap 1 to cis 1.11 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-04-14 21:15:33 +02:00
Thomas Sjögren
d33e30d28d Merge pull request #131 from konstruktoid/version 
docker_current_version
 2016-04-14 20:21:45 +02:00
Thomas Sjögren
03ec1b96b7 docker_current_version 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-04-14 20:18:49 +02:00
Thomas Sjögren
55a796e4cf Merge pull request #130 from konstruktoid/issue_129 
ps flags not in output
 2016-03-31 20:53:48 +02:00
Thomas Sjögren
8d6f1e81c2 ps flags not in output 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-03-29 23:52:39 +02:00
Thomas Sjögren
c28ce3468e Merge pull request #125 from konstruktoid/1.10.3 
version 1.10.3
 2016-03-11 22:02:29 +01:00
Thomas Sjögren
d3ff26c5fa version 1.10.3 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-03-11 22:01:32 +01:00
Thomas Sjögren
3d7f124b89 Merge pull request #118 from konstruktoid/issue117 
use stat to verify permissions
 2016-03-11 21:32:55 +01:00
Thomas Sjögren
904558f34a Merge pull request #122 from konstruktoid/issue90 
use debian default docker.io
closes #90
 2016-03-03 22:00:51 +01:00
Thomas Sjögren
65f1ac935a use debian default docker.io 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-03-01 21:37:23 +01:00
Thomas Sjögren
66493b73b0 Merge pull request #121 from mefellows/fix-spelling-mistake 
Fix spelling mistake (proccesses -> processes)
 2016-02-26 21:21:40 +01:00
Matt Fellows
4d8ffc5943 Fix spelling mistake (proccesses -> processes) 
Signed-off-by: Matt Fellows <matt.fellows@onegeek.com.au>
 2016-02-25 11:08:43 +11:00
Thomas Sjögren
00ea5bc0fb Merge pull request #120 from konstruktoid/release 
1.10.2 release
 2016-02-23 21:25:41 +01:00
Thomas Sjögren
94d8a611d8 1.10.2 release 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-02-23 21:24:27 +01:00
Thomas Sjögren
001811bf87 use stat to verify permissions 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-02-16 23:23:27 +01:00
Thomas Sjögren
f81bc4d6d2 Merge pull request #116 from konstruktoid/1.10.1 
current version 1.10.1 and correct date
 2016-02-15 20:59:20 +01:00
Thomas Sjögren
68082d0727 current version 1.10.1 and correct date 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-02-15 20:58:19 +01:00
Thomas Sjögren
8dd73df5e6 Merge pull request #115 from konstruktoid/v1.10.0 
update to v1.10.0
 2016-02-05 20:57:50 +01:00
Thomas Sjögren
7c6a637b62 update to v1.10.0 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-02-05 20:56:25 +01:00
Thomas Sjögren
cfa653d8d8 Merge pull request #112 from konstruktoid/alpine_docker 
keep docker updated, shrink image
 2015-12-22 20:58:48 +01:00
Thomas Sjögren
b8728927e4 keep docker updated, shrink image 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-22 20:46:56 +01:00
Thomas Sjögren
5155cae50a Merge pull request #111 from konstruktoid/docker_inspect_format 
inspect output changed
 2015-12-22 20:34:11 +01:00
Thomas Sjögren
00a1270c9b inspect output changed 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-22 19:46:32 +01:00
Thomas Sjögren
81fc9ac3ed Merge pull request #110 from konstruktoid/issue109 
Fixes #109
 2015-12-22 19:17:26 +01:00
Thomas Sjögren
4e414f51ef check /etc/systemd/system/ before systemctl, /usr/lib/systemd/ fallback 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-14 20:27:10 +01:00
Thomas Sjögren
e19f997b3f if systemctl show fails, use /usr/lib/systemd/system/ path 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:57:40 +01:00
Thomas Sjögren
606f70f83f flexible paths for docker.socket as well 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:16:50 +01:00
Thomas Sjögren
e8c6b94143 check docker.service 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:08:46 +01:00
Thomas Sjögren
a53e1bec44 Merge pull request #105 from andreasstieger/version-check 
Improve version check, fixes #103
 2015-12-07 20:00:03 +01:00
Thomas Sjögren
574648bf56 Merge pull request #106 from andreasstieger/check-remote-users 
Support remote users and groups for group check. Fixes #104
 2015-12-07 19:02:19 +01:00
Thomas Sjögren
5e1c2b7ec1 Merge pull request #108 from thaJeztah/add-maintainers 
Add MAINTAINERS file
 2015-12-07 18:50:45 +01:00
Sebastiaan van Stijn
fd82ff8186 Add MAINTAINERS file 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2015-12-07 18:49:11 +01:00
Andreas Stieger
e285c472d6 Support remote users and groups for group check. Fixes #104 
Grepping /etc/group discards users and grous coming from NIS, LDAP, AD.
Use getent group which covers all.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:17:48 +01:00
Andreas Stieger
3f538f537f Vendors now support docker packages, add language for #103 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:09:15 +01:00
Andreas Stieger
2c6285d4ef Improve statement of version check 1.6, fixes #103 
Add an as-of date.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 15:43:13 +01:00
Thomas Sjögren
93439abcd3 Merge pull request #102 from konstruktoid/systemd_service 
Systemd service
 2015-11-27 19:53:47 +01:00
Thomas Sjögren
80794e5638 get .service file location from systemd 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:26:03 +01:00
Thomas Sjögren
e5f15e216d get the systemd service file 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:25:14 +01:00
Thomas Sjögren
eda8e3a963 Merge pull request #100 from andreasstieger/cli 
Fix command line option parsing issues 
Closes #97 #98 #99
 2015-11-27 18:45:23 +01:00
Andreas Stieger
d2ba1d9f72 Fix #97, #98, #99 by using new helper functions 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-27 15:35:37 +01:00
Thomas Sjögren
5939f09acb Merge pull request #101 from konstruktoid/bump_version 
latest version is 1.9.1
 2015-11-21 20:51:38 +01:00
Thomas Sjögren
2e6d3b290a latest version is 1.9.1 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-21 20:51:05 +01:00
Andreas Stieger
49f78d715a In preparation to fixing #99, normalize different methods of quoting to no quoting 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:37 +01:00
Andreas Stieger
ef81ec7a47 Add helper functions in preparation of fixing #97, #98, #99 
get_docker_cumulative_command_line_args: new
get_docker_effective_command_line_args: new

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:33 +01:00
Andreas Stieger
3b6a0d1a6e Documentation fix for get_command_line_args 
pgrep is run with -o, returning only the oldest process, usually the daemon.
Adjust function comment. TODO: read from PID file

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 14:56:34 +01:00
Thomas Sjögren
f2f1195550 Merge pull request #91 from MrSecure/29-tcp-required 
check for TCP socket before checking for TLS
 2015-11-14 20:54:41 +01:00