DISA_STIG_Docker_Enterprise_2.x_Linux_Unix_UCP_v2r2.audit from DISA Docker Enterprise 2.x Linux/UNIX v2r2 STIG

DKER-EE-001000 - The Docker Enterprise Per User Limit Login Session Control in the Universal Control Plane (UCP) Admin Settings must be set to an organization-defined value for all accounts and/or account types.

800-53|AC-10

CAT|III

CCI|CCI-000054

Rule-ID|SV-235775r960735_rule

STIG-ID|DKER-EE-001000

STIG-Legacy|SV-104693

STIG-Legacy|V-94863

Vuln-ID|V-235775

DKER-EE-001080 - The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.

800-53|AC-6(9)

800-53|AC-17(1)

800-53|AU-3

800-53|AU-3(1)

800-53|AU-4(1)

800-53|AU-12a.

800-53|AU-12c.

800-53|AU-14(1)

800-53|AU-14(2)

800-53|CM-5(1)

800-53|SI-7(8)

800-53|SI-10(3)

CAT|II

CCI|CCI-000067

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000169

CCI|CCI-000172

CCI|CCI-001462

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-001814

CCI|CCI-001851

CCI|CCI-002234

CCI|CCI-002723

CCI|CCI-002754

Rule-ID|SV-235778r960765_rule

STIG-ID|DKER-EE-001080

STIG-Legacy|SV-104699

STIG-Legacy|V-94869

Vuln-ID|V-235778

DKER-EE-001100 - LDAP integration in Docker Enterprise must be configured.

800-53|AC-2(1)

800-53|CM-7a.

800-53|IA-2

800-53|IA-2(12)

800-53|IA-5(1)(f)

800-53|IA-5(2)(d)

800-53|IA-8(1)

800-53|IA-8(2)

800-53|IA-8(4)

CCI|CCI-000015

CCI|CCI-000381

CCI|CCI-000764

CCI|CCI-001953

CCI|CCI-001954

CCI|CCI-001991

CCI|CCI-002010

CCI|CCI-002011

CCI|CCI-002014

CCI|CCI-002041

Rule-ID|SV-235780r960768_rule

STIG-ID|DKER-EE-001100

STIG-Legacy|SV-104703

STIG-Legacy|V-95113

Vuln-ID|V-235780

DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.

800-53|AC-3

800-53|AC-3(4)

800-53|AC-4

800-53|AC-6(8)

800-53|AC-6(10)

800-53|AC-16a.

800-53|AU-10

800-53|CM-7(2)

800-53|CM-11(2)

800-53|SC-4

800-53|SC-5(1)

800-53|SC-5(2)

800-53|SI-11b.

CCI|CCI-000166

CCI|CCI-000213

CCI|CCI-001090

CCI|CCI-001094

CCI|CCI-001095

CCI|CCI-001314

CCI|CCI-001368

CCI|CCI-001414

CCI|CCI-001764

CCI|CCI-001812

CCI|CCI-001813

CCI|CCI-002165

CCI|CCI-002233

CCI|CCI-002235

CCI|CCI-002262

CCI|CCI-002263

CCI|CCI-002264

Rule-ID|SV-235781r960792_rule

STIG-ID|DKER-EE-001170

STIG-Legacy|SV-104705

STIG-Legacy|V-95355

Vuln-ID|V-235781

DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - team member access

Rule-ID|SV-235782r960792_rule

STIG-ID|DKER-EE-001180

STIG-Legacy|SV-104707

STIG-Legacy|V-95357

Vuln-ID|V-235782

DKER-EE-001870 - The Docker Enterprise self-signed certificates in Universal Control Plane (UCP) must be replaced with DoD trusted, signed certificates.

Rule-ID|SV-235793r960963_rule

STIG-ID|DKER-EE-001870

STIG-Legacy|SV-104757

STIG-Legacy|V-95619

Vuln-ID|V-235793

DKER-EE-001890 - The option in Universal Control Plane (UCP) allowing users and administrators to schedule containers on all nodes, including UCP managers and Docker Trusted Registry (DTR) nodes must be disabled in Docker Enterprise.

Rule-ID|SV-235795r960963_rule

STIG-ID|DKER-EE-001890

STIG-Legacy|SV-104761

STIG-Legacy|V-95623

Vuln-ID|V-235795

DKER-EE-001910 - Periodic data usage and analytics reporting in Universal Control Plane (UCP) must be disabled in Docker Enterprise.

Rule-ID|SV-235797r960963_rule

STIG-ID|DKER-EE-001910

STIG-Legacy|SV-104765

STIG-Legacy|V-95627

Vuln-ID|V-235797

DKER-EE-002180 - SAML integration must be enabled in Docker Enterprise.

800-53|IA-2(1)

800-53|IA-2(2)

800-53|IA-2(3)

800-53|IA-2(4)

800-53|IA-2(5)

CCI|CCI-000765

CCI|CCI-000766

CCI|CCI-000767

CCI|CCI-000768

CCI|CCI-000770

CCI|CCI-002009

Rule-ID|SV-235821r960972_rule

STIG-ID|DKER-EE-002180

STIG-Legacy|SV-104815

STIG-Legacy|V-95677

Vuln-ID|V-235821

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - lifetime_minutes

800-53|AC-11(1)

800-53|AC-11a.

800-53|AC-12

800-53|IA-5(13)

800-53|IA-11

800-53|SC-10

CCI|CCI-000057

CCI|CCI-000060

CCI|CCI-001133

CCI|CCI-002007

CCI|CCI-002038

CCI|CCI-002361

Rule-ID|SV-235825r961068_rule

STIG-ID|DKER-EE-002490

STIG-Legacy|SV-104821

STIG-Legacy|V-95683

Vuln-ID|V-235825

DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - renewal_threshold_minutes

DKER-EE-002970 - The Docker Enterprise per user limit login session control must be set per the requirements in the System Security Plan (SSP).

Rule-ID|SV-235829r961221_rule

STIG-ID|DKER-EE-002970

STIG-Legacy|SV-104829

STIG-Legacy|V-95691

Vuln-ID|V-235829

DKER-EE-003590 - Content Trust enforcement must be enabled in Universal Control Plane (UCP) in Docker Enterprise.

800-53|CM-7(5)(b)

CCI|CCI-001774

Rule-ID|SV-235838r961479_rule

STIG-ID|DKER-EE-003590

STIG-Legacy|SV-104847

STIG-Legacy|V-95709

Vuln-ID|V-235838

DKER-EE-003920 - Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA) in Docker Enterprise.

800-53|SC-23(5)

CCI|CCI-002470

Rule-ID|SV-235841r961596_rule

STIG-ID|DKER-EE-003920

STIG-Legacy|SV-104853

STIG-Legacy|V-95715

Vuln-ID|V-235841

DKER-EE-004370 - Docker Content Trust enforcement must be enabled in Universal Control Plane (UCP).

CCI|CCI-002724

Rule-ID|SV-235847r961770_rule

STIG-ID|DKER-EE-004370

STIG-Legacy|SV-104867

STIG-Legacy|V-95729

Vuln-ID|V-235847

DKER-EE-006190 - Docker Enterprise Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA).

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-235871r961038_rule

STIG-ID|DKER-EE-006190

Detections

Analytics

DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2

Audit Details

File Details

Audit Changelog

No revisions found