Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
SSH must not run within Linux containers for Docker Enterprise.
Description
Discussion Text
SSH server should not be running within the container. The user should instead use Universal Control Plane (UCP) to console in to running containers.
Running SSH within the container increases the complexity of security management by making it:
- Difficult to manage access policies and security compliance for SSH server
- Difficult to manage keys and passwords across various containers
- Difficult to manage security upgrades for SSH server
- It is possible to have shell access to a container without using SSH, the needlessly increasing the complexity of security management should be avoided
By default, SSH server is not running inside the container. Only one process per container is allowed.
Running SSH within the container increases the complexity of security management by making it:
- Difficult to manage access policies and security compliance for SSH server
- Difficult to manage keys and passwords across various containers
- Difficult to manage security upgrades for SSH server
- It is possible to have shell access to a container without using SSH, the needlessly increasing the complexity of security management should be avoided
By default, SSH server is not running inside the container. Only one process per container is allowed.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.