aquasecurity/docker-bench

CIS Benchmarks -- Docker Hosts --2.14、Ensure live restore is Enabled

amitaqua opened this issue · 1 comments

Seems we do not check the values we have in the /etc/docker/daemon.json and if we have set there:

"live-restore": true

This is not found and fails the test.

@yoavrotems seems still not fixed on my testing.
Set in /etc/docker/daemon.json
{
"data-root": "/mnt/mydocker/docker-data",
"userland-proxy": false,
"no-new-privileges": true
}

Yet - still get:
2.14.a You should run the Docker daemon as below:
dockerd --userland-proxy=false