DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_UCP_v2r1.audit from DISA Docker Enterprise 2.x Linux/UNIX v2r1 STIG

DKER-EE-001000 - The Docker Enterprise Per User Limit Login Session Control in the Universal Control Plane (UCP) Admin Settings must be set to an organization-defined value for all accounts and/or account types.

800-53|AC-10

CAT|III

CCI|CCI-000054

Rule-ID|SV-235775r627452_rule

STIG-ID|DKER-EE-001000

STIG-Legacy|SV-104693

STIG-Legacy|V-94863

Vuln-ID|V-235775

DKER-EE-001080 - The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.

800-53|AC-6(9)

800-53|AC-17(1)

800-53|AU-3

800-53|AU-3(1)

800-53|AU-4(1)

800-53|AU-12a.

800-53|AU-12c.

800-53|AU-14(1)

800-53|AU-14(2)

800-53|CM-5(1)

800-53|SI-7(8)

800-53|SI-10(3)

CAT|II

CCI|CCI-000067

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000169

CCI|CCI-000172

CCI|CCI-001462

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-001814

CCI|CCI-001851

CCI|CCI-002234

CCI|CCI-002723

CCI|CCI-002754

Rule-ID|SV-235778r627461_rule

STIG-ID|DKER-EE-001080

STIG-Legacy|SV-104699

STIG-Legacy|V-94869

Vuln-ID|V-235778

DKER-EE-001100 - LDAP integration in Docker Enterprise must be configured.

800-53|AC-2(1)

800-53|CM-7a.

800-53|IA-2

800-53|IA-2(12)

800-53|IA-5(1)(f)

800-53|IA-5(2)(d)

800-53|IA-8(1)

800-53|IA-8(2)

800-53|IA-8(4)

CCI|CCI-000015

CCI|CCI-000381

CCI|CCI-000764

CCI|CCI-001953

CCI|CCI-001954

CCI|CCI-001991

CCI|CCI-002010

CCI|CCI-002011

CCI|CCI-002014

CCI|CCI-002041

Rule-ID|SV-235780r627467_rule

STIG-ID|DKER-EE-001100

STIG-Legacy|SV-104703

STIG-Legacy|V-95113

Vuln-ID|V-235780

DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.

800-53|AC-3

800-53|AC-3(4)

800-53|AC-4

800-53|AC-6(8)

800-53|AC-6(10)

800-53|AC-16a.

800-53|AU-10

800-53|CM-7(2)

800-53|CM-11(2)

800-53|SC-4

800-53|SC-5(1)

800-53|SC-5(2)

800-53|SI-11b.

CCI|CCI-000166

CCI|CCI-000213

CCI|CCI-001090

CCI|CCI-001094

CCI|CCI-001095

CCI|CCI-001314

CCI|CCI-001368

CCI|CCI-001414

CCI|CCI-001764

CCI|CCI-001812

CCI|CCI-001813

CCI|CCI-002165

CCI|CCI-002233

CCI|CCI-002235

CCI|CCI-002262

CCI|CCI-002263

CCI|CCI-002264

Rule-ID|SV-235781r627470_rule

STIG-ID|DKER-EE-001170

STIG-Legacy|SV-104705

STIG-Legacy|V-95355

Vuln-ID|V-235781

DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - team member access

Rule-ID|SV-235782r627473_rule

STIG-ID|DKER-EE-001180

STIG-Legacy|SV-104707

STIG-Legacy|V-95357

Vuln-ID|V-235782

DKER-EE-001870 - The Docker Enterprise self-signed certificates in Universal Control Plane (UCP) must be replaced with DoD trusted, signed certificates.

Rule-ID|SV-235793r627506_rule

STIG-ID|DKER-EE-001870

STIG-Legacy|SV-104757

STIG-Legacy|V-95619

Vuln-ID|V-235793

DKER-EE-001890 - The option in Universal Control Plane (UCP) allowing users and administrators to schedule containers on all nodes, including UCP managers and Docker Trusted Registry (DTR) nodes must be disabled in Docker Enterprise.

Rule-ID|SV-235795r627512_rule

STIG-ID|DKER-EE-001890

STIG-Legacy|SV-104761

STIG-Legacy|V-95623

Vuln-ID|V-235795

DKER-EE-001910 - Periodic data usage and analytics reporting in Universal Control Plane (UCP) must be disabled in Docker Enterprise.

Rule-ID|SV-235797r627518_rule

STIG-ID|DKER-EE-001910

STIG-Legacy|SV-104765

STIG-Legacy|V-95627

Vuln-ID|V-235797

DKER-EE-002180 - SAML integration must be enabled in Docker Enterprise.

800-53|IA-2(1)

800-53|IA-2(2)

800-53|IA-2(3)

800-53|IA-2(4)

800-53|IA-2(5)

CCI|CCI-000765

CCI|CCI-000766

CCI|CCI-000767

CCI|CCI-000768

CCI|CCI-000770

CCI|CCI-002009

Rule-ID|SV-235821r627590_rule

STIG-ID|DKER-EE-002180

STIG-Legacy|SV-104815

STIG-Legacy|V-95677

Vuln-ID|V-235821

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - lifetime_minutes

800-53|AC-11(1)

800-53|AC-11a.

800-53|AC-12

800-53|IA-5(13)

800-53|IA-11

800-53|SC-10

CCI|CCI-000057

CCI|CCI-000060

CCI|CCI-001133

CCI|CCI-002007

CCI|CCI-002038

CCI|CCI-002361

Rule-ID|SV-235825r627602_rule

STIG-ID|DKER-EE-002490

STIG-Legacy|SV-104821

STIG-Legacy|V-95683

Vuln-ID|V-235825

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - renewal_threshold_minutes

DKER-EE-002970 - The Docker Enterprise per user limit login session control must be set per the requirements in the System Security Plan (SSP).

Rule-ID|SV-235829r627614_rule

STIG-ID|DKER-EE-002970

STIG-Legacy|SV-104829

STIG-Legacy|V-95691

Vuln-ID|V-235829

DKER-EE-003590 - Content Trust enforcement must be enabled in Universal Control Plane (UCP) in Docker Enterprise.

800-53|CM-7(5)(b)

CCI|CCI-001774

Rule-ID|SV-235838r627641_rule

STIG-ID|DKER-EE-003590

STIG-Legacy|SV-104847

STIG-Legacy|V-95709

Vuln-ID|V-235838

DKER-EE-003920 - Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.

800-53|SC-23(5)

CCI|CCI-002470

Rule-ID|SV-235841r627650_rule

STIG-ID|DKER-EE-003920

STIG-Legacy|SV-104853

STIG-Legacy|V-95715

Vuln-ID|V-235841

DKER-EE-004370 - Docker Content Trust enforcement must be enabled in Universal Control Plane (UCP).

CCI|CCI-002724

Rule-ID|SV-235847r627668_rule

STIG-ID|DKER-EE-004370

STIG-Legacy|SV-104867

STIG-Legacy|V-95729

Vuln-ID|V-235847

DKER-EE-006190 - Docker Enterprise Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA).

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-235871r627740_rule

STIG-ID|DKER-EE-006190

Detections

Analytics

DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1

Audit Details

File Details

Audit Changelog

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.5 Jun 17, 2024 Miscellaneous Metadata updated. References updated.
Revision 1.4 Apr 12, 2023 Miscellaneous Metadata updated.
Revision 1.3 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.2 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.1 Apr 25, 2022 Miscellaneous Metadata updated. References updated.

Detections

Analytics

DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1