DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r1

This audit file has been deprecated and will be removed in a future update.

Name: DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r1

Updated: 8/28/2024

Authority: DISA STIG

Plugin: Unix

Revision: 1.6

Estimated Item Count: 8

Filename: DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r1.audit

Size: 26.6 kB

MD5: 56964705b815bb8a79718450ffa1148b

SHA256: 55bb4e98bb54364cfc41d5c03ad3a999c2868655e8be1a677038d359faba901b

Description	Categories
DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r1.audit from DISA Docker Enterprise 2.x Linux/UNIX v2r1 STIG
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess	ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY
DKER-EE-001880 - The Docker Enterprise self-signed certificates in Docker Trusted Registry (DTR) must be replaced with DoD trusted, signed certificates.	CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION
DKER-EE-001900 - The Create repository on push option in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-001920 - Periodic data usage and analytics reporting in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-003840 - Vulnerability scanning must be enabled for all repositories in the Docker Trusted Registry (DTR) component of Docker Enterprise.	RISK ASSESSMENT
DKER-EE-003930 - Docker Trusted Registry (DTR) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.	CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION
DKER-EE-004260 - Only trusted, signed images must be stored in Docker Trusted Registry (DTR) in Docker Enterprise.	SYSTEM AND INFORMATION INTEGRITY