Thomas Sjögren
b5c571df18
shellcheck fixes
...
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2015-06-21 23:03:34 +02:00
Liron Levin
b2093036df
Fix CIS 5.8 - Reverse container port and reduce privileged port to 1024
...
-- According to CIS, 5.8 apply to priviliged port on the host not on the
container:
`processes are not allowed to use them for various security reasons.
Docker allows a
container port to be mapped to a privileged port.`
-- Also privileged port should be less than 1024 inclusive
Signed-off-by: liron-l <levinlir@gmail.com>
Signed-off-by: Liron Levin <liron@twistlock.com>
2015-06-21 07:25:24 +03:00
Zvi "Viz" Effron
3616f15cba
Fix test 5.14 to not always pass when multiple ports are published.
...
Signed-off-by: Zvi "Viz" Effron <zeffron@riotgames.com>
2015-06-15 11:26:13 -07:00
Jessica Frazelle
0231a7f5de
Make the main script an executable for if I want to run it on my host
...
Fix image sprawl to work
Fix port range
Signed-off-by: Jessica Frazelle <princess@docker.com>
2015-06-09 00:10:44 -07:00
Thomas Sjögren
2e92ed5a01
exec_check had extra space
...
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2015-06-01 22:46:58 +02:00
Thomas Sjögren
787f4325b2
update 5.7 exec_check to new style
...
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2015-06-01 22:44:37 +02:00
Werner Buck
f4aab9c8c5
Double quote to prevent globbing and word splitting.
...
Do not use legacy backticks.
Proper use of printf
Do not use wc -l with grep, instead use grep -c
Use pgrep
Signed-off-by: Werner Buck <wernerbuck@gmail.com>
2015-05-31 12:26:37 +02:00
Thomas Sjögren
643beee453
fail=1 when Docker exec fails
...
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2015-05-30 13:03:01 +02:00
Diogo Monica
4194b1e65c
Adding double quotes to
2015-05-25 20:31:46 -07:00
Diogo Monica
03ac3f5bd3
Make ifs style be consistent
2015-05-14 20:26:32 -07:00
Diogo Monica
1c795f146e
Added filtering to ignore security-benchmark container
2015-05-13 19:22:39 -07:00
Diogo Monica
1ebf49c35a
Fixed the script to ignore containers with label security-benchmark
2015-05-13 17:08:12 -07:00
Diogo Monica
e63766e945
Added more empty modes. This does not seem to be consistent
2015-05-13 16:13:03 -07:00
Diogo Monica
18d5a13240
First version of the CIS Docker Benchmark v1.0.0
2015-05-13 15:26:45 -07:00
