hardening-docker-daemon-configuration
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches the official Rootless Docker installation script from
https://get.docker.com/rootlessand executes it via the shell. This is an official source for Docker components. - [COMMAND_EXECUTION]: Instructs the user to perform system-level configuration tasks using
sudo, including directory creation, file movement, and permission adjustments (chmod,chown). These operations are required to modify the Docker daemon's configuration files and secure the Docker socket. - [COMMAND_EXECUTION]: Provides instructions for generating cryptographic keys and certificates using
opensslto secure the Docker Remote API. The process includes setting appropriate file permissions for the generated sensitive files. - [COMMAND_EXECUTION]: Recommends the execution of the
docker/docker-bench-securitytool for automated auditing. While this container requires elevated privileges to inspect the host's configuration, its use is standard practice for verifying compliance with the Docker CIS benchmark.
Audit Metadata