pool/docker-bench-security
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity
35 Commits 3 Branches 0 Tags
factory
Commit Graph

20 Commits

Author SHA256 Message Date
Dirk Mueller
83fed58f06 Accepting request 1219596 from home:cyphar:docker 
- Update to docker-bench-security v1.6.1. See upstream changelog online at
  <https://github.com/docker/docker-bench-security/releases/tag/v1.6.1>.
  * Align with CIS Docker Benchmark v1.6.0.

  v1.6.0 <https://github.com/docker/docker-bench-security/releases/tag/v1.6.0>
  * Fix image sprawl miscalculation.
  * Add an option to filter out labels to exclude from checks.

  v1.5.0 <https://github.com/docker/docker-bench-security/releases/tag/v1.5.0>
  * Align with CIS Docker Benchmark v1.5.0.
  * Add support for .NanoCpus.

  v1.3.6 <https://github.com/docker/docker-bench-security/releases/tag/v1.3.6>
  * Add CIS Level 1 only functions.
  * Support user namespaces in partition check.
  * Deprecate rule 2.16 for Docker > 19.03.
  * Add checks for capabilities that allows container escape.
  * Implement listing of open ports.
  * Add 4.12 check.

- Rather than patching the script entirely using sed (which can make updates
  error-prone), apply an actual patch to switch to using a LIBEXEC variable we
  can replace during packaging. Backport of
  <https://github.com/docker/docker-bench-security/pull/559>.
  + 0001-dist-adjust-script-imports-to-be-able-to-use-usr-lib.patch

- checks implementing CIS Docker 1.11.0 Benchmark

OBS-URL: https://build.opensuse.org/request/show/1219596
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=33
 2024-11-12 09:43:56 +00:00
Marcus Meissner
74086ff6e8 Accepting request 809776 from security:tools 
OBS-URL: https://build.opensuse.org/request/show/809776
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=31
 2020-05-28 07:13:33 +00:00
Marcus Meissner
64f4310f30 Accepting request 750503 from security:tools 
OBS-URL: https://build.opensuse.org/request/show/750503
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=29
 2019-11-24 10:26:51 +00:00
Andreas Stieger
2869755bd6 Accepting request 563601 from security:tools 
docker-bench-security 1.3.3

OBS-URL: https://build.opensuse.org/request/show/563601
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=27
 2018-01-11 13:28:56 +00:00
Andreas Stieger
c02cadeb38 Accepting request 493012 from security:tools 
docker-bench-security 1.3.2

OBS-URL: https://build.opensuse.org/request/show/493012
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=25
 2017-05-05 13:36:49 +00:00
Andreas Stieger
33e2d5c9d8 Accepting request 460157 from security:tools 
1.3.0

OBS-URL: https://build.opensuse.org/request/show/460157
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=23
 2017-02-24 08:40:01 +00:00
Andreas Stieger
9b71415834 Accepting request 416391 from security:tools 
Docker Bench for Security v1.1.0

OBS-URL: https://build.opensuse.org/request/show/416391
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=21
 2016-08-01 12:44:46 +00:00
Andreas Stieger
45b4cb3267 Accepting request 400376 from security:tools 
1

OBS-URL: https://build.opensuse.org/request/show/400376
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=19
 2016-06-07 07:49:13 +00:00
Andreas Stieger
0a2f783de1 Accepting request 394769 from security:tools 
1

OBS-URL: https://build.opensuse.org/request/show/394769
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=17
 2016-05-11 07:54:44 +00:00
Andreas Stieger
8844a70346 Accepting request 390589 from security:tools 
- checks implementing CIS Docker 1.11.0 Benchmark 
  https://benchmarks.cisecurity.org/downloads/show-single/index.cfm?file=docker16.110
- checks for docker 1.11.0
- use stat to verify permissions
- fixes for process detection

OBS-URL: https://build.opensuse.org/request/show/390589
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=15
 2016-04-18 15:23:27 +00:00
Andreas Stieger
406ffebabe Accepting request 359975 from security:tools 
- checks for docker 1.10.1

OBS-URL: https://build.opensuse.org/request/show/359975
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=13
 2016-02-17 14:05:40 +00:00
Andreas Stieger
8519bdddc0 Accepting request 358207 from security:tools 
1

OBS-URL: https://build.opensuse.org/request/show/358207
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=11
 2016-02-07 11:40:19 +00:00
Andreas Stieger
9bec04ca23 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=10 2015-11-27 23:18:37 +00:00
Andreas Stieger
bb24aba795 Accepting request 346594 from security:tools 
refresh

OBS-URL: https://build.opensuse.org/request/show/346594
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=9
 2015-11-27 23:16:28 +00:00
Andreas Stieger
990e92d083 Accepting request 346540 from security:tools 
- checks for docker 1.9.1

OBS-URL: https://build.opensuse.org/request/show/346540
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=8
 2015-11-27 15:07:28 +00:00
Andreas Stieger
123abe1b96 Accepting request 346537 from security:tools 
fix patch

OBS-URL: https://build.opensuse.org/request/show/346537
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=7
 2015-11-27 15:02:07 +00:00
Andreas Stieger
08e50d1b94 cl 
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=6
 2015-11-25 13:51:10 +00:00
Andreas Stieger
795f643b85 Accepting request 345038 from security:tools 
- Fix command line option parsing
- check for TCP socket before checking for TLS

OBS-URL: https://build.opensuse.org/request/show/345038
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=5
 2015-11-18 13:10:29 +00:00
Andreas Stieger
f66459f9af Accepting request 343952 from security:tools 
- fix detection of socket security

OBS-URL: https://build.opensuse.org/request/show/343952
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=3
 2015-11-12 07:49:06 +00:00
Flavio Castelli
d93e8c483d Accepting request 343081 from security:tools 
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Add to Virtualization:containers for docker topic.

OBS-URL: https://build.opensuse.org/request/show/343081
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-bench-security?expand=0&rev=1
 2015-11-09 08:53:13 +00:00