DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r1

Name: DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r1

Updated: 6/17/2024

Authority: DISA STIG

Plugin: Unix

Revision: 1.5

Estimated Item Count: 8

Filename: DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r1.audit

Size: 29.7 kB

MD5: f91efdb1f1c69993548a6d7c0243c81a

SHA256: 5108c2a403a205961780c1765a47704325b96d04108fe17450fe49d2383dc7f7

Description	Categories
DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r1.audit from DISA Docker Enterprise 2.x Linux/UNIX v2r1 STIG
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess	ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY
DKER-EE-001880 - The Docker Enterprise self-signed certificates in Docker Trusted Registry (DTR) must be replaced with DoD trusted, signed certificates.	CONFIGURATION MANAGEMENT
DKER-EE-001900 - The Create repository on push option in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-001920 - Periodic data usage and analytics reporting in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-003840 - Vulnerability scanning must be enabled for all repositories in the Docker Trusted Registry (DTR) component of Docker Enterprise.	RISK ASSESSMENT
DKER-EE-003930 - Docker Trusted Registry (DTR) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.	SYSTEM AND COMMUNICATIONS PROTECTION
DKER-EE-004260 - Only trusted, signed images must be stored in Docker Trusted Registry (DTR) in Docker Enterprise.	CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY