DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_UCP_v1r1.audit from DISA Docker Enterprise 2.x Linux/Unix STIG v1r1

DKER-EE-001000 - The Docker Enterprise Per User Limit Login Session Control in the Universal Control Plane (UCP) Admin Settings must be set to an organization-defined value for all accounts and/or account types.

800-53|AC-10

800-53|AC-12

CAT|III

CCI|CCI-000054

Rule-ID|SV-104693r1_rule

STIG-ID|DKER-EE-001000

Vuln-ID|V-94863

DKER-EE-001080 - The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.

800-53|AC-6(9)

800-53|AC-17(1)

800-53|AU-3

800-53|AU-3(1)

800-53|AU-4(1)

800-53|AU-12

800-53|AU-14

800-53|CM-5(1)

800-53|SI-7(8)

800-53|SI-10(3)

CAT|II

CCI|CCI-000067

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000169

CCI|CCI-000172

CCI|CCI-001462

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-001814

CCI|CCI-001851

CCI|CCI-002234

CCI|CCI-002723

CCI|CCI-002754

Rule-ID|SV-104699r1_rule

STIG-ID|DKER-EE-001080

Vuln-ID|V-94869

DKER-EE-001100 - LDAP integration in Docker Enterprise must be configured.

800-53|AC-2(1)

800-53|CM-7

800-53|IA-2

800-53|IA-2(12)

800-53|IA-5(1)

800-53|IA-5(2)

800-53|IA-8(1)

800-53|IA-8(2)

800-53|IA-8(4)

CCI|CCI-000015

CCI|CCI-000381

CCI|CCI-000764

CCI|CCI-001953

CCI|CCI-001954

CCI|CCI-001991

CCI|CCI-002010

CCI|CCI-002011

CCI|CCI-002014

CCI|CCI-002041

Rule-ID|SV-104703r1_rule

STIG-ID|DKER-EE-001100

Vuln-ID|V-95113

DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.

800-53|AC-3

800-53|AC-3(4)

800-53|AC-4

800-53|AC-6(8)

800-53|AC-6(10)

800-53|AC-16

800-53|AU-10

800-53|CM-7(2)

800-53|CM-11(2)

800-53|SC-4

800-53|SC-5(1)

800-53|SC-5(2)

800-53|SI-11

CCI|CCI-000166

CCI|CCI-000213

CCI|CCI-001090

CCI|CCI-001094

CCI|CCI-001095

CCI|CCI-001314

CCI|CCI-001368

CCI|CCI-001414

CCI|CCI-001764

CCI|CCI-001812

CCI|CCI-001813

CCI|CCI-002165

CCI|CCI-002233

CCI|CCI-002235

CCI|CCI-002262

CCI|CCI-002263

CCI|CCI-002264

Rule-ID|SV-104705r1_rule

STIG-ID|DKER-EE-001170

Vuln-ID|V-95355

DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set. - team member access

Rule-ID|SV-104707r1_rule

STIG-ID|DKER-EE-001180

Vuln-ID|V-95357

DKER-EE-001870 - The Docker Enterprise self-signed certificates in Universal Control Plane (UCP) must be replaced with DoD trusted, signed certificates.

800-53|SC-23(5)

Rule-ID|SV-104757r1_rule

STIG-ID|DKER-EE-001870

Vuln-ID|V-95619

DKER-EE-001890 - The option in Universal Control Plane (UCP) allowing users and administrators to schedule containers on all nodes, including UCP managers and Docker Trusted Registry (DTR) nodes must be disabled in Docker Enterprise.

Rule-ID|SV-104761r1_rule

STIG-ID|DKER-EE-001890

Vuln-ID|V-95623

DKER-EE-001910 - Periodic data usage and analytics reporting in Universal Control Plane (UCP) must be disabled in Docker Enterprise.

Rule-ID|SV-104765r1_rule

STIG-ID|DKER-EE-001910

Vuln-ID|V-95627

DKER-EE-002180 - SAML integration must be enabled in Docker Enterprise.

800-53|IA-2(1)

800-53|IA-2(2)

800-53|IA-2(3)

800-53|IA-2(4)

800-53|IA-2(5)

CCI|CCI-000765

CCI|CCI-000766

CCI|CCI-000767

CCI|CCI-000768

CCI|CCI-000770

CCI|CCI-002009

Rule-ID|SV-104815r1_rule

STIG-ID|DKER-EE-002180

Vuln-ID|V-95677

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise. - lifetime_minutes

800-53|AC-11

800-53|AC-11(1)

800-53|IA-5(13)

800-53|IA-11

800-53|SC-10

CCI|CCI-000057

CCI|CCI-000060

CCI|CCI-001133

CCI|CCI-002007

CCI|CCI-002038

CCI|CCI-002361

Rule-ID|SV-104821r1_rule

STIG-ID|DKER-EE-002490

Vuln-ID|V-95683

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise. - renewal_threshold_minutes

DKER-EE-002970 - The Docker Enterprise per user limit login session control must be set per the requirements in the System Security Plan (SSP).

Rule-ID|SV-104829r1_rule

STIG-ID|DKER-EE-002970

Vuln-ID|V-95691

DKER-EE-003590 - Content Trust enforcement must be enabled in Universal Control Plane (UCP) in Docker Enterprise.

800-53|CM-7(5)

CCI|CCI-001774

Rule-ID|SV-104847r1_rule

STIG-ID|DKER-EE-003590

Vuln-ID|V-95709

DKER-EE-003920 - Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.

CCI|CCI-002470

Rule-ID|SV-104853r1_rule

STIG-ID|DKER-EE-003920

Vuln-ID|V-95715

DKER-EE-004370 - Docker Content Trust enforcement must be enabled in Universal Control Plane (UCP).

CCI|CCI-002724

Rule-ID|SV-104867r1_rule

STIG-ID|DKER-EE-004370

Vuln-ID|V-95729

DKER-EE-006190 - Docker Enterprise Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA).

CCI|CCI-000185

Rule-ID|SV-104917r1_rule

STIG-ID|DKER-EE-006190

Vuln-ID|V-95779

DKER-EE-006280 - Docker Enterprise Universal Control Plane (UCP) must be configured to use TLS 1.2.

Detections

Analytics

DISA STIG Docker Enterprise 2.x Linux/Unix UCP v1r1

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.3 Aug 30, 2021 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.2 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2021 Miscellaneous Metadata updated.