Docker Hardening

[Amado.Saeeed]

Hello,

I followed this docker hardening documentation to harden the docker containerzied environment for Cortex XSOAR solutin. 

I added the first server configuration key as this (docker.run.internal.asuser = true), and reset docker containers then issue this command (!py script="import os;print(os.getuid())") to validate if docker currently run under non root user, and it returns 999 which is good.

But after i added the second configuration key mentioned in the document as this (docker.run.internal.asuser.ignore=demisto/python3:,demisto/python:), and repeat the same process to confirm user, it returned (0) this time. 

So i'm just wondering if this is normal of have i made a mistake while adding the second key.

Thanks,

Ahmed Saeed

[Amado.Saeeed]

 I ran the final hardening check script, and this is the output

[EnesOzdemir]

I think the second configuration is for exceptions where the container doesn't support non root users. You basically set all python 3 docker images to run as root