DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r2

Name: DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r2

Updated: 8/28/2024

Authority: DISA STIG

Plugin: Unix

Revision: 1.0

Estimated Item Count: 8

Filename: DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r2.audit

Size: 30.1 kB

MD5: 44cecd0726c801248a41976bdc13876b

SHA256: b36ec2c1b99cb5ffe67212ae99eb2207e6ee5e36869fc1855363b6a94730575c

Description	Categories
DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_DTR_v2r2.audit from DISA Docker Enterprise 2.x Linux/UNIX v2r2 STIG
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess	ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY
DKER-EE-001880 - The Docker Enterprise self-signed certificates in Docker Trusted Registry (DTR) must be replaced with DoD trusted, signed certificates.	CONFIGURATION MANAGEMENT
DKER-EE-001900 - The Create repository on push option in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-001920 - Periodic data usage and analytics reporting in Docker Trusted Registry (DTR) must be disabled in Docker Enterprise.	CONFIGURATION MANAGEMENT
DKER-EE-003840 - Vulnerability scanning must be enabled for all repositories in the Docker Trusted Registry (DTR) component of Docker Enterprise.	RISK ASSESSMENT
DKER-EE-003930 - Docker Trusted Registry (DTR) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.	SYSTEM AND COMMUNICATIONS PROTECTION
DKER-EE-004260 - Only trusted, signed images must be stored in Docker Trusted Registry (DTR) in Docker Enterprise.	CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY