DockerHardeningCheck

Checks if the Docker container running this script has been hardened according to the recommended settings located here.

Script Data#


NameDescription
Script Typepython3
TagsUtility
Demisto Version5.0.0+

Inputs#


Argument NameDescription
memoryThe amount of memory to check. This is specified in bytes or append MB/GB for Mega/Giga bytes. The default is 1 GB.
memory_checkThe memory check type to perform: cgroup - check memory cgroup configuration, allocate - try allocating actual memory and verify that the allocation fails. Note the allocate test on some configurations may cause the container to be killed by the linux memory manager and the whole test will then time out.
pidsThe maximum number of PIDs to check.
fds_softThe soft file descriptor limit to check.
fds_hardThe hard file descriptor limit to check.
cpusThe number of CPUs limit to check.

Outputs#


There are no outputs for this script.