9a4f7f6039
- Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/releases/tag/v0.19.0> * <https://github.com/docker/buildx/releases/tag/v0.18.0> - Update to Go 1.22. - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker (which creates special mounts in /run/secrets to allow container-suseconnect to authenticate containers with registries on registered hosts). bsc#1231348 bsc#1232999 In order to disable these mounts, just do echo 0 > /etc/docker/suse-secrets-enable and restart Docker. In order to re-enable them, just do echo 1 > /etc/docker/suse-secrets-enable and restart Docker. Docker will output information on startup to tell you whether the SUSE secrets feature is enabled or not. * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch - Add docker-integration-tests-devel subpackage for building and running the upstream Docker integration tests on machines to test that Docker works properly. Users should not install this package. - docker-rpmlintrc updated to include allow-list for all of the integration tests package, since it contains a bunch of stuff that wouldn't normally be allowed. OBS-URL: https://build.opensuse.org/request/show/1230066 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=420
28 lines
1.2 KiB
Plaintext
28 lines
1.2 KiB
Plaintext
##
|
|
# Audit rules based on CIS Docker 1.6 Benchmark v1.0.0
|
|
# https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1.6_Benchmark_v1.0.0.pdf
|
|
# Not all of these apply to SUSE.
|
|
# 1.8 Audit docker daemon
|
|
-w /usr/bin/docker -k docker
|
|
# 1.9 Audit Docker files and directories
|
|
-w /var/lib/docker -k docker
|
|
# 1.10 Audit /etc/docker
|
|
-w /etc/docker -k docker
|
|
# 1.11 Audit Docker files and directories - docker-registry.service
|
|
-w /usr/lib/systemd/system/docker-registry.service -k docker
|
|
# 1.12 Audit Docker files and directories - docker.service
|
|
-w /usr/lib/systemd/system/docker.service -k docker
|
|
# 1.13 Audit Docker files and directories - /var/run/docker.sock
|
|
-w /var/run/docker.sock -k docker
|
|
# 1.14 Audit Docker files and directories - /etc/sysconfig/docker
|
|
-w /etc/sysconfig/docker -k docker
|
|
# 1.15 Audit Docker files and directories - /etc/sysconfig/docker-network
|
|
-w /etc/sysconfig/docker-network -k docker
|
|
# 1.16 Audit Docker files and directories - /etc/sysconfig/docker-registry
|
|
-w /etc/sysconfig/docker-registry -k docker
|
|
# 1.17 Audit Docker files and directories - /etc/sysconfig/docker-storage
|
|
-w /etc/sysconfig/docker-storage -k docker
|
|
# 1.18 Audit Docker files and directories - /etc/default/docker
|
|
-w /etc/default/docker -k docker
|
|
## end docker audit rules
|