3.1 Verify that docker.service file ownership is set to root:root

Information

If you are using Docker on a machine that uses systemd to manage services, then verify that
the 'docker.service' file ownership and group-ownership is correctly set to 'root'.

'docker.service' file contains sensitive parameters that may alter the behavior of Docker
daemon. Hence, it should be owned and group-owned by 'root' to maintain the integrity of
the file.

Solution

#> chown root-root /usr/lib/systemd/system/docker.serviceThis would set the ownership and group-ownership for the file to 'root'.

Impact-None.

Default Value-This file may not be present on the system. In that case, this recommendation is not
applicable. By default, if the file is present, the ownership and group-ownership for this file
is correctly set to 'root'.

See Also

https://workbench.cisecurity.org/files/514

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|3.1

Plugin: Unix

Control ID: 334bd9542a9fe4174ca8e55f14675c248ba10da15efe2c6d4602096c2dcd0847