GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-19 08:42:33 +01:00
Code Issues Projects Releases Packages Wiki Activity
461 commits 3 branches 11 tags 4.9 MiB
Commit graph

461 commits

This branch
This branch
All branches
Author SHA1 Message Date
Thomas Sjögren
8dd73df5e6 Merge pull request #115 from konstruktoid/v1.10.0 
update to v1.10.0
 2016-02-05 20:57:50 +01:00
Thomas Sjögren
7c6a637b62 update to v1.10.0 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2016-02-05 20:56:25 +01:00
Thomas Sjögren
cfa653d8d8 Merge pull request #112 from konstruktoid/alpine_docker 
keep docker updated, shrink image
 2015-12-22 20:58:48 +01:00
Thomas Sjögren
b8728927e4 keep docker updated, shrink image 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-22 20:46:56 +01:00
Thomas Sjögren
5155cae50a Merge pull request #111 from konstruktoid/docker_inspect_format 
inspect output changed
 2015-12-22 20:34:11 +01:00
Thomas Sjögren
00a1270c9b inspect output changed 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-22 19:46:32 +01:00
Thomas Sjögren
81fc9ac3ed Merge pull request #110 from konstruktoid/issue109 
Fixes #109
 2015-12-22 19:17:26 +01:00
Thomas Sjögren
4e414f51ef check /etc/systemd/system/ before systemctl, /usr/lib/systemd/ fallback 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-14 20:27:10 +01:00
Thomas Sjögren
e19f997b3f if systemctl show fails, use /usr/lib/systemd/system/ path 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:57:40 +01:00
Thomas Sjögren
606f70f83f flexible paths for docker.socket as well 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:16:50 +01:00
Thomas Sjögren
e8c6b94143 check docker.service 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-12-12 16:08:46 +01:00
Thomas Sjögren
a53e1bec44 Merge pull request #105 from andreasstieger/version-check 
Improve version check, fixes #103
 2015-12-07 20:00:03 +01:00
Thomas Sjögren
574648bf56 Merge pull request #106 from andreasstieger/check-remote-users 
Support remote users and groups for group check. Fixes #104
 2015-12-07 19:02:19 +01:00
Thomas Sjögren
5e1c2b7ec1 Merge pull request #108 from thaJeztah/add-maintainers 
Add MAINTAINERS file
 2015-12-07 18:50:45 +01:00
Sebastiaan van Stijn
fd82ff8186 Add MAINTAINERS file 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2015-12-07 18:49:11 +01:00
Andreas Stieger
e285c472d6 Support remote users and groups for group check. Fixes #104 
Grepping /etc/group discards users and grous coming from NIS, LDAP, AD.
Use getent group which covers all.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:17:48 +01:00
Andreas Stieger
3f538f537f Vendors now support docker packages, add language for #103 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 16:09:15 +01:00
Andreas Stieger
2c6285d4ef Improve statement of version check 1.6, fixes #103 
Add an as-of date.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-12-01 15:43:13 +01:00
Thomas Sjögren
93439abcd3 Merge pull request #102 from konstruktoid/systemd_service 
Systemd service
 2015-11-27 19:53:47 +01:00
Thomas Sjögren
80794e5638 get .service file location from systemd 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:26:03 +01:00
Thomas Sjögren
e5f15e216d get the systemd service file 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-27 19:25:14 +01:00
Thomas Sjögren
eda8e3a963 Merge pull request #100 from andreasstieger/cli 
Fix command line option parsing issues 
Closes #97 #98 #99
 2015-11-27 18:45:23 +01:00
Andreas Stieger
d2ba1d9f72 Fix #97, #98, #99 by using new helper functions 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-27 15:35:37 +01:00
Thomas Sjögren
5939f09acb Merge pull request #101 from konstruktoid/bump_version 
latest version is 1.9.1
 2015-11-21 20:51:38 +01:00
Thomas Sjögren
2e6d3b290a latest version is 1.9.1 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-21 20:51:05 +01:00
Andreas Stieger
49f78d715a In preparation to fixing #99, normalize different methods of quoting to no quoting 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:37 +01:00
Andreas Stieger
ef81ec7a47 Add helper functions in preparation of fixing #97, #98, #99 
get_docker_cumulative_command_line_args: new
get_docker_effective_command_line_args: new

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 16:34:33 +01:00
Andreas Stieger
3b6a0d1a6e Documentation fix for get_command_line_args 
pgrep is run with -o, returning only the oldest process, usually the daemon.
Adjust function comment. TODO: read from PID file

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-17 14:56:34 +01:00
Thomas Sjögren
f2f1195550 Merge pull request #91 from MrSecure/29-tcp-required 
check for TCP socket before checking for TLS
 2015-11-14 20:54:41 +01:00
Mr. Secure
f791d06cff apply TLS checks to any socket other than unix:// or fd:// 
break the docker command line arguments into one option per line,
then find all socket items (H or host), exclude the unix:// and
fd:// sockets, and if there are any left, check for TLS options

Signed-off-by: Mr. Secure <ben.github@mrsecure.org>
 2015-11-13 19:51:46 -06:00
Thomas Sjögren
e84f47b6b6 Merge pull request #96 from andreasstieger/sockets 
correct UNIX domain socket handling - fixes #94 and #95
 2015-11-11 20:47:49 +01:00
Andreas Stieger
cd7efa2afc Fix test 3.25, correctly check for root:docker ownership, fixes #95 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-11 18:58:03 +01:00
Andreas Stieger
c5cb9cdc5c POSIX test command requires -S for UNIX domain sockets, fixes #94 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-11 18:57:58 +01:00
Thomas Sjögren
adf88311e0 Merge pull request #93 from konstruktoid/version 
1.9.0 released
 2015-11-04 18:24:54 +01:00
Thomas Sjögren
9b9f17cabc 1.9.0 released 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-11-04 18:23:25 +01:00
Thomas Sjögren
32fdfe2ca6 Merge pull request #92 from andreasstieger/dockerfile-opensuse 
add Dockerfile for openSUSE
 2015-11-04 18:20:50 +01:00
Andreas Stieger
70e3e07c9b add Dockerfile for openSUSE 
Signed-off-by: Andreas Stieger <astieger@suse.com>
 2015-11-03 13:30:59 +01:00
MrSecure
81730f536a check for TCP listener 
Signed-off-by: Mr. Secure <ben.github@mrsecure.org>
 2015-10-30 07:48:11 -05:00
Thomas Sjögren
8eb4cf7e13 Merge pull request #88 from HuKeping/master 
Docs: update readme
 2015-10-22 19:17:48 +02:00
HuKeping
322124c1dc Docs: update readme 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2015-10-22 17:11:10 +08:00
Diogo Mónica
04f93b1f72 Merge pull request #86 from lusitania/have-compose 
Use compose to improve readability
 2015-10-06 08:29:12 -07:00
lusitania
10f0689b02 use compose to improve readability 
Signed-off-by: Peter <lusitania@users.noreply.github.com>
 2015-10-06 07:30:21 +02:00
Thomas Sjögren
62bc609528 Merge pull request #87 from konstruktoid/bump_version 
current version is 1.8.2
 2015-10-01 21:50:13 +02:00
Thomas Sjögren
50dc806232 current version is 1.8.2 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-10-01 21:46:33 +02:00
Thomas Sjögren
297368ec0f Merge pull request #84 from lusitania/#83-reorder-centos-steps 
#83 First instruction must be FROM
 2015-09-16 18:34:10 +02:00
Peter
a9bb0123b2 #83 First instruction must be FROM 
See https://docs.docker.com/reference/builder/

Signed-off-by: lusitania <lusitania@users.noreply.github.com>
 2015-09-14 13:14:02 +02:00
Thomas Sjögren
dafd938d19 Merge pull request #81 from konstruktoid/tee_file_missing 
missing file as non-root user
 2015-09-05 16:26:55 +02:00
Thomas Sjögren
32282729dc missing file as non-root user 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-09-05 16:23:34 +02:00
Thomas Sjögren
91304ad47a Merge pull request #80 from konstruktoid/nonroot_delay 
dont sleep before showing flags
 2015-09-05 15:52:27 +02:00
Thomas Sjögren
a0f66dba13 dont sleep before showing flags 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2015-09-05 15:51:51 +02:00