← Back to Container Platform Security Requirements Guide

V-233071

CAT II (Medium)

The container platform must be configured with only essential configurations.

Rule ID

SV-233071r960963_rule

STIG

Container Platform Security Requirements Guide

Version

V2R4

CCIs

CCI-000381

Discussion

The container platform can be built with components that are not used for the intended purpose of the organization. To limit the attack surface of the container platform, it is essential that the non-essential services are not installed.

Check Content

Review the container platform configuration and verify that only those components needed for operation are installed. 

If components are installed that are not used for the intended purpose of the organization, this is a finding.

Fix Text

Identify the role the container platform is intended to play in the production environment and remove any components that are not needed or used for the intended purpose.