3.19 Ensure that the /etc/default/docker file ownership is set to root:root

Information

You should verify that the /etc/default/docker file ownership and group-ownership is correctly set to root.

Rationale:

The /etc/default/docker file contains sensitive parameters that may alter the behavior of the Docker daemon. It should therefore be individually owned and group owned by root to ensure that it cannot be modified by less privileged users.

Impact:

None.

Solution

You should execute the following command

chown root:root /etc/default/docker

This sets the ownership and group ownership of the file to root.

Default Value:

This file may not be present on the system, and in this case, this recommendation is not applicable.

See Also

https://workbench.cisecurity.org/benchmarks/11818