Skip to content

If I fix 1.1.8 according remediation,both of 1.1.8 and 1.1.4 will PASS #106

@y4ney

Description

@y4ney
  • If I execute the remediation in 1.1.8 of cis-1.3.1 which is auditing containerd.sock ,the check 1.1.4 will also pass. Because the path of containerd.sock contains the /run/containerd
-w /run/containerd/containerd.sock -k docker
  • As for check 1.1.4, if audit rule contains the directory /run/containerd,It will PASS
auditctl -l | grep /run/containerd
  • But in fact, I did not audit the directory /run/containerd

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions