Docker Hardening

Amado.Saeeed — Sat, 22 Oct 2022 10:10:54 GMT

Hello,

I followed this docker hardening documentation to harden the docker containerzied environment for Cortex XSOAR solutin.

I added the first server configuration key as this (docker.run.internal.asuser = true), and reset docker containers then issue this command (!py script="import os;print(os.getuid())") to validate if docker currently run under non root user, and it returns 999 which is good.

But after i added the second configuration key mentioned in the document as this (docker.run.internal.asuser.ignore=demisto/python3:,demisto/python:), and repeat the same process to confirm user, it returned (0) this time.

So i'm just wondering if this is normal of have i made a mistake while adding the second key.

Thanks,

Ahmed Saeed

Re: Docker Hardening

Amado.Saeeed — Sat, 22 Oct 2022 10:58:01 GMT

I ran the final hardening check script, and this is the output

Re: Docker Hardening

EnesOzdemir — Wed, 01 Feb 2023 08:04:50 GMT

I think the second configuration is for exceptions where the container doesn't support non root users. You basically set all python 3 docker images to run as root

topic Re: Docker Hardening in Cortex XSOAR Discussions

Docker Hardening

Re: Docker Hardening

Re: Docker Hardening