As we were a little silly when launching our containers on the Docker Host that we audited, we know that there will be a lot of vulnerabilities here, and there are 11 of them altogether:
[WARN] 5.2 - Ensure SELinux security options are set, if applicable[WARN] * No SecurityOptions Found: sshd[WARN] * No SecurityOptions Found: root-nginx
The preceding vulnerability is a false positive; we are not running SELinux, as it is an Ubuntu machine, and SELinux is only applicable to Red Hat based machines; instead, 5.1 shows us the result, which is a [PASS], which we want:
[PASS] 5.1 - Ensure AppArmor Profile is Enabled
The next two [WARN] statuses are of our own making, as follows:
[WARN] 5.4 - Ensure privileged containers are not ...